From: SIOC < a 22-SIOC T | ti‘ wststi‘aS TWatch < «sa - Subject: FW: [EXTERNAL EMAIL] - ZeroFOX Enterprise - SIOC - VIP Location Threats Alert for SIOC - VIP - 227727740 Date: Wed, 21 Jun 2023 20:25:13 +0000 Importance: Normal Inline-Images: ~WRDO0001 jpg ALCON, Forwarded for your situational awareness and any appropriate action. Emergency Action Specialist Watch Commander Strategic Information & Operations Center (SIOC) National Response Coordination Section (NRCS) FBIHQ S71) Main: From: Sent: Wednesday, June 21, 2023 4:22 PM To: SIOC —— Subject: [EXTERNAL EMAIL] - ZeroFOX Enterprise - SIOC - VIP Location Threats Alert for SIOC - VIP - 227727740 | | ZeroFOX Enterprise SIOC - VIP Location Threats Alert SIOC - VIP Hello, EFTA00163269

--=PAGE_BREAK=--

Arule within the ZeroFOX platform has triggered this alert. If you believe you are receiving this email by accident please contact customer support. Date Identified: Jun. 21, 2023, 8:21 p.m. UTC Company Name: FEDERAL BUREAU OF INVESTIGATION Rule: SIOC - VIP Location Threats Alert Type: Search Query Risk Rating: high Related EntityName: SIOC- VIP Network: Forums Offending Content: http://boards.4chan.org/pol/thread/429801454/if-they- arrest-trump-storm-chris-wrays-house View Offending Content Source Platform About ZeroFOX _—— Privacy Policy Metadata: { "ai_confidence display": [], "alert_reasons": [], "content_raw_data": { "alert_modal": { "Site": "4chan.org", "Title": "/pol/ - If they arrest Trump, storm Chris Wra y’s house - Politically Incorrect - 4chan" de "channel name": "/pol/ - If they arrest Trump, storm Chris Wray’s house - Politically Incorrect - 4chan", "target_index": 0 i "content_type": "page", "content_url": "http://boards.4chan.org/pol/thread/42980145 4/if-they-arrest-trump-storm-chris-wrays-house", "enrichment": { "analysis-message-mapper": { EFTA00163270

--=PAGE_BREAK=--

"enterpriseID": 4810, "entityID": 1136762, "network": "forums", "relation": "search_query", "serviceOrigin": "webhose-pipeline", "texts": [ { "field": "content.text", "item": "2540 Arden Rd. NW\nAtlanta, GA 30327\nThey want to arrest Trump while the FBI has more whistleblowers aga inst Biden than Epstein had slaves blowing whistles?\nThey wan t to call us Nazis?\nFine. Let’s show them what a fucking ‘Naz i’ (Freedom loving Patriots who won't go down without a fight) looks like.\nWhite, black, brown, straight, gay, bi, Muslim, C hristian\nAll are welcome. It’s time to burn these mother fuck ers down and hang them from trees.\nHit them where it fucking hurts.\nHit Chris at his home.\nMake his family fear stepping one foot outside their god damn door.\nFuck these people. I'd rather die fighting them than die an old man under the rule of the Unholy Trinity of WASPs, Kikes, and Jesuits.\nTHIS. IS. WA R." } l, "type": "page", "urls": null , "language-detection": { "confidence": 0, "detected language": "None", "detection _ method": "languageProbability", "iso_639_ 3": "None", "language probability": { "None": O } }, "tagging": { "matches": { "AGG: :BRANDSEC::COMPLAINTS": { "matches": [ { "from": 14, "inputStr": "http://boards.4chan.org/pol/thread/ 429", "inputStrID": ".content.contentUrl", "matchedStr": "4chan.org", "to": 23 { "from": 578, "inputStr": " god damn door.\nFuck these people. I", "inputStrID": ".content.text", "matchedStr": "\nFuck ", "to": 584 "from": 563, EFTA00163271

--=PAGE_BREAK=--

"inputStr": "t outside their god damn door.\nFuc k thes", "inputStrID": ".content.text", "matchedStr": " god damn ", "to": 573 , { "from": 408, "inputStr": "e to burn these mother fuckers down and hang t", "inputStrID": ".content.text", "matchedStr": " mother fuckers ", "to": 424 ) ly "weight": 4 i "AGG: :PHYSEC: : THREATS": { "matches": [ { "from": 14, "inputStr": "http://boards.4chan.org/pol/thread/ 429", "inputStrID": ".content.contentUrl", "matchedStr": "4chan.org", "to": 23 , { "from": 48, "inputStr": "27\nThey want to arrest Trump while th", "inputStrID": ".content.text", "matchedStr": " arrest", "to": 55 , { "from": 397, "inputStr": " It’s time to burn these mother f", "inputStrID": ".content.text", "matchedStr": " burn", "to": 402 , { "from": 397, "inputStr": " It’s time to burn these mother fuc ke", "inputStrID": ".content.text", "matchedStr": " burn the", "to": 406 } lr "weight": 4 } , "tags": [ "AGG: : PHYSEC: : THREATS", "AGG: : BRANDSEC: :COMPLAINTS" EFTA00163272

--=PAGE_BREAK=--

} , "error logger": {}, "image overlays": [], "occurrences": [ { "origin": null, ‘tern: } lr "offending content": [ { "origin": null, "term": "2540 Arden Rd. NW", "text": "2540 Arden Rd. NW\nAtlanta, GA 30327\nThey want to arrest Trump while the FBI has more whistleblowers against Biden than Epstein had slaves blowing whistles?\nThey want to call us Nazis?\nFine. Let’s show them what a fucking ‘Nazi’ (F reedom loving Patriots who won’t go down without a fight) look s like.\nWhite, black, brown, straight, gay, bi, Muslim, Chris tian\nAll are welcome. It’s time to burn these mother fuckers down and hang them from trees.\nHit them where it fucking hurt s.\nHit Chris at his home.\nMake his family fear stepping one foot outside their god damn door.\nFuck these people. I'd rath er die fighting them than die an old man under the rule of the Unholy Trinity of WASPs, Kikes, and Jesuits.\nTHIS. IS. WAR." } [Download the ZeroFOX Mobile App Lo Co) 1834 S. Charles Street Baltimore, MD 21230 zerofox.com // 855.936.9369 EFTA00163273