DAPL SITREP 235 May 6, 2017 John Porter
 Chief Security Officer 
 INFORMATION CONTAINED IN THIS REPORT IS PROPRIETARY AND SENSITIVE.
 DO NOT RELEASE OUTSIDE OF AUTHORIZED AND APPROVED RECIPIENTS. INFORMATION CONTAINED IN THIS REPORT IS PROPRIETARY AND SENSITIVE DO NOT RELEASE OUTSIDE OF AUTHORIZED AND APPROVED RECIPIENTS The Highlights An additional 6 protesters had their cases dismissed yesterday in Morton County. Christine Nobiss and her boyfriend, Lakasha are back at Little Creek Camp. There are several additional native members there from the Indigenous Youth Council. A salesman at Acme Tools in Des Moines, IA positively identified Ruby Montoya and Christine Nobiss at the store approximately a week and a half ago. Chicago based activists recently are posting an article from South Dakota that police have increased patrols around DAPL valve sites. The Details 1 . NORTH DAKOTA A. Intel Update 1) 5 protesters stopped by HDD West, took pictures of TS vehicles and personnel before departing. a. WHEN - 06 MAY 2017, Approximately 1815 CST to 1835 CST b. WHO - 5 protesters (4 males, 1 female) TigerSwan Prepared for Energy Transfer Partners 1 INFORMATION CONTAINED IN THIS REPORT IS PROPRIETARY AND SENSITIVE DO NOT RELEASE OUTSIDE OF AUTHORIZED AND APPROVED RECIPIENTS TigerSwan c. WHERE - HDD West, Gate 3 Gate 1 d. WHAT - Driving a White Buick Park Avenue approximately 1998 - 2000 model. Stopped at Gate 3 at the West HDD. 4 TS personnel were on scene at Gate 3. 5th TS personnel pulled up behind the vehicle from HWY 1806. The vehicle departed Northbound on HWY 1806. TS personnel followed the vehicle on HWY 1806. The vehicle slowed down and pulled over to the side of the road near GATE 1. 1 TS personnel continued Northbound on HWY 1806. 2 TS personnel pulled around the vehicle on the East side of the HWY, preventing the vehicle from entering the approach into GATE 1. The vehicle continued Northbound, but pulled over and stopped approximately 150 meters North of GATE 1. 2 TS personnel pulled up in the ditch just North of the protester vehicle. 1 TS personnel pulled into the ditch just South of the vehicle. All 5 protesters exited the vehicle and began taking pictures of TS vehicles, before attempting to look auspicious by pointing and looking Northwest (away from the HDD site). 1 additional TS personnel pulled into the ditch on the North side of the protester vehicle. 1 TS personnel approached the Prepared for Energy Transfer Partners 2 INFORMATION CONTAINED IN THIS REPORT IS PROPRIETARY AND SENSITIVE DO NOT RELEASE OUTSIDE OF AUTHORIZED AND APPROVED RECIPIENTS protesters. The protesters stated they were a legal team and they were just checking to see everything was up to par. TS informed them that they were on private property and they needed to leave. The protesters stated there were no "No Trespassing" signs. The protesters asked TS which security company they worked for. TS personnel departed back to their vehicle, but remained on location. Protesters slowly entered their vehicle and departed Northbound on HWY 1806. e. WHY - Exact intentions unknown, but were likely conducting scouting operations. Prior drive by's of the Camp included possible sightings of the vehicle inside the Camp. Vehicle was spotted on CR-134 between ND-Valve 370 and HWY 1806 earlier today during standard roving operations. 2) ND Incident Report: SUMMARY: a. Protester trespassed onto DAPL property at HDD-West Gate 3 and slashed TS vehicle tire. Suspect in custody. b. WHEN - 06 MAY 2017, Approximately 2100 CST - 2140 CST. c. WHO - 1 male protester d. WHERE - HDD-West Gate 3 e. WHAT - Protester trespassed onto DAPL property at HDD-West Gate 1 carrying a knife. Protester proceeded to disable TS vehicle using the knife to puncture a wheel. LE was contacted and responded. At TigerSwan Prepared for Energy Transfer Partners 3 INFORMATION CONTAINED IN THIS REPORT IS PROPRIETARY AND SENSITIVE DO NOT RELEASE OUTSIDE OF AUTHORIZED AND APPROVED RECIPIENTS approximately 2140 CST, LE had a suspect in custody. f. WHY - Exact intentions unknown at this time. This could potentially be retaliation for the event earlier today in the area of the HDD gates. It could also be potentially serving as a distraction for an attack elsewhere while TS vehicle is disabled. g. TS personnel responding by posting static positions at some of the more vulnerable/convenient valves ND-370 and ND-350 in addition to the standard roving position and static position at GATE 3. 3) Cheyenne River Camp traffic died off in the last 24 hours. There were only 4 vehicles in camp this morning and 3 vehicles this afternoon in comparison to the 12 vehicles observed yesterday. a. Analyst Comment: This information is consistent with prior source reporting which stated the camp would be closed until Monday, May 8th. 4) North Dakota Courts continue to be lenient and unable to convict many of the protesters who were arrested during the protests. An additional 6 protesters had their cases dismissed yesterday. Link to Article: Bismarck Tribune Story B. Past 24 Hours 1) Maintained security at valves ND-280 to ND-430 using roving patrols. TigerSwan Prepared for Energy Transfer Partners 4 INFORMATION CONTAINED IN THIS REPORT IS PROPRIETARY AND SENSITIVE DO NOT RELEASE OUTSIDE OF AUTHORIZED AND APPROVED RECIPIENTS 2) New back door installed in the North Barn on Meyer Properties 3) Valve sites inspections: ND-360 No Trespassing signs were installed today ND-370 No Trespassing signs were installed today C. Next 24 Hours 1) Continue monitoring of Open Source information, ISR feeds, and other sources of information to provide accurate assessments of protester activities/migration which may impact DAPL operations. 2) DAPL security will continue to rove the valve sites in North Dakota. 3) Michels continues restoration efforts at the HDDs, awaiting delivery of trees 2.IOWA A. Intel Update 1) Christine Nobiss and her boyfriend, Lakasha are back at Little Creek Camp. There are several additional native members there from the Indigenous Youth Council. also seems to be back at camp. Therefore, several potential arson accomplices are back at the camp making the valve sites nearest the camp especially vulnerable. 2) A salesman at Acme Tools in Des Moines, IA positively identified Ruby Montoya and Christine Nobiss at the store approximately a week and a half ago. He did not recognize Jessica Reznicek. He states he does not remember them buying anything, but saw them asking for help at the help desk. The store sells welding supplies and the salesman states they usually refer people to the local Praxair for filling tanks up with gas. Praxair is closed until Monday. The salesman freely gave his business card and is available for more questions. a. Analyst Comment: Montoya and Nobiss may have been looking for a cheaper place to fill their tanks. The tanks captured on the game camera appear to be relatively small and unlikely to have long cutting times (Lincoln Electric states cutting time is 10 minutes for standard 20 cu Oxygen and 10 cu Acetylene tanks). Without a steady income, refilling their tanks is likely becoming a hardship. 3) Members of Little Creek Camp held a divestment action outside the Wells Fargo in Iowa City. Lakasha was noticeable more vocal than he usually is in live streams of the event. Otherwise, the action seemed anticlimactic B. Past 24 Hours 1) Iowa DAPL Security patrolled the ROW, assessed the condition and upgrades, and interacted with the DAPL security force. TigerSwan Prepared for Energy Transfer Partners 5 INFORMATION CONTAINED IN THIS REPORT IS PROPRIETARY AND SENSITIVE DO NOT RELEASE OUTSIDE OF AUTHORIZED AND APPROVED RECIPIENTS 2) Continued to adjust security posture to account for recent attacks. 3) Canvassed additional local hardware stores throughout Iowa to look for potential spots Reznicek and Montoya bought welding supplies. 4) Communicated BOLO information with local landowners, gas station attendants, additional construction crew members, and hardware store workers. 5) Identified additional Catholic Worker houses that Reznicek and Montoya could be using as safehouses C. Next 24 Hours 1) Finish presentation for Iowa LE Fusion Center and prepare for potential meeting on Monday. 2) Continue monitoring of Open Source information, ISR feeds, and other sources of information to provide accurate assessments of protester activities/migration which may impact DAPL operations 3.ILLINOIS A. Intel Update 1) Chicago based activists recently are posting an article from South Dakota that police have increased patrols around DAPL valve sites. Activists in Illinois continue to actively tracking events affecting direct action and in this case targeted vandalism. At this point the Illinois social media circle appears to condone targeted violence and any attempt by the police to intervene is simply the government at war with the people and siding with POTUS and big business. It appears that the normalization of targeted vandalism has been effective in with activists in Illinois in general and Chicago specifically. We can expect that when the vandals are caught they will be heralded as heroes but the majority of Illinois activists. http://www.kdlt.com/2017/05/04/law-enforcement-increases-patrols-neardapl/ 2) While a portion of landowners in Illinois have become slightly agitated with the delays in the recovery of their property. The majority of the neighbors remain vigilant and in some cases are happy with the manner in which the workers have conducted themselves throughout the construction. One neighbor went so far as to deliver doughnuts to the workers at IL L/R1. TS-IL PM attempted to visit with the woman at her home but was unable to make contact. TS-IL PM made contact with lady’s husband and explained the purpose of the visit. TS-IL PM left his card with the husband assuring him that if he saw something at the L/R site or needed assistance, he need only call and someone would come out and address it situation. The gentleman said that he would remain vigilant. A few hours later the TS-IL PM received the following text message: TigerSwan Prepared for Energy Transfer Partners 6 INFORMATION CONTAINED IN THIS REPORT IS PROPRIETARY AND SENSITIVE DO NOT RELEASE OUTSIDE OF AUTHORIZED AND APPROVED RECIPIENTS - Thanks for stopping by. Sorry, I was watching Mickey Mouse with our 2 year old grandson. I really appreciate all that you do and how nice you all are. Donuts are nothing, but friendship is so much better. We will miss you all when you are gone. Our door is always open and please stop by if close. Also, Thank You All for picking up the field. I was waiting till it dried out. Recommend DAPL personnel continue to actively cultivate positive relationships and strategic messaging to neighbors throughout the ROW. This will increase local vigilance at the majority of the sites allowing critical resources to be applied to the more remote locations. 3) International Indigenous Youth Council - Chicago continues their growing partnership with other minority activists groups such as Chi Resists. (ChiResists is connected with BLM -Chicago) Through planning a trip to Mexico to continue the no borders narrative combined with the ?water Protectors? narrative. This demonstrates the continuing merger of efforts towards a more anarchist/antifa theme. FPUCAMON frag; 4) The International Indigenous Youth Council - Chicago continues their effort to align with activists currently in Iowa. IIYC-Chicago has been referring to the Little Creek Camp as ?their camp? and more recently IIYC-Chicago traveled to Iowa City to support a Divestment protest against Wells Fargo. This reinforces the connection that exists between Iowa and Chicago activists. It also demonstrates the growing potential for more direct action within Illinois in support of direct actions in Iowa. s: TigerSwan Prepared for Energy Transfer Partners 7 INFORMATION CONTAINED IN THIS REPORT IS PROPRIETARY AND SENSITIVE DO NOT RELEASE OUTSIDE OF AUTHORIZED AND APPROVED RECIPIENTS B. Past 24 Hours 1) Continued ROW and facility assessment and update running estimate of the security status 2) Conducted open source monitoring of activist groups 4) Conducted increased presence patrols throughout the AO as a means of active deterrence. 5) Conducted patrols to identify the presence and location of POIs C. Next 24 Hours 1) Continue to support Sunoco personnel with operations as needed 2) Conduct assessments and photo documentation of the sites across the entire Illinois line 3) Conduct open source monitoring of activist groups 4) Conduct active security in order to deter or apprehend any threats to the DAPL valve facilities 5) Assist in multi-state search in person of interest, Jessica Reznicek. 6) Continue search effort with TS Joint Intel Team in the effort to locate persons of interest suspected of attacking and attempting to attack valve sites in Iowa and Illinois 4. SOUTH DAKOTA A. Intel Update 1) SD leadership security personnel, made contact with - - Ph. a neighbor in close proximity to SD-265. He is pro-pipeline and eager to assist in any way possible. Photos of probable suspect?s vehicle, Jessica Reznicek, were shown to-. TigerSwan Prepared for Energy Transfer Partners 8 INFORMATION CONTAINED IN THIS REPORT IS PROPRIETARY AND SENSITIVE 2) 0 NOT RELEASE OUTSIDE OF AUTHORIZED AND APPROVED RECIPIENTS Because of the announcement that oil will not be flowing until 14 May 2017, additional sabotage attempts are expected from protestors. B. Past 24 Hours 1) completed drone training and has successfully passed the 2) 3) C. Ne 1) 2) 5.MAIN A. Int 1) drone operator test. - is now an official drone operator in the state of SD. Security guards continue to make liaison with homeowners in vicinity to DAPL valve sites to establish good rapport and use as a source of information for reporting. Guardian Angel (GA) issues have been addressed with current SD security company. Discrepancies have been pushed to GA help desk and is being resolved. Should have all security personnel at 100% on GA in the next 24 hours. xt 24 Hours As the upcoming date of 14 May 2017 encroaches, we are heightening our guard postures, ensuring guards are roving constantly, changing their routes randomly, and paying close attention to areas of interest. Remote valves are getting more attention and we are continuing to utilize property owners and neighboring homes as reporting assets. Ensure all guards are aware of the heightened threat level because of the 14 May 2017 deadline. SD is utilizing their Internal intel WhatsApp reporting to push any suspicious vehicles or persons immediately to higher or authorities TERMINALS el Update Currently, Epping, Ramberg and Stanley terminals have security guards on site 18:00- 06:00 hours daily and 24/7 on the weekends. The guards are not responsible for signing people in to the terminal. The "Inspector" onsite is responsible for monitoring who is on and who is not. The gates to the terminals are to be closed all day, with the inspector authorizing access. The gates are closed and locked about 17:30 and remain so all night. The guards are more of a "roving patrol" to ensure no trespassing occurs rather than authoring access. Trenton, Watford City and Johnsons Corner Terminals will follow suit on the 9th, 15th and 17th, respectively. This latest change is supposed to stay in effect until "cameras" are installed. It appears that client pipelines into the terminals are about finished, at least for unless they sign up new clients. 2) The next thing seems to be Truck Terminals. Each of the 6 terminals will TigerSwan have a truck drop off point. Prepared for Energy Transfer Partners 9 INFORMATION CONTAINED IN THIS REPORT IS PROPRIETARY AND SENSITIVE DO NOT RELEASE OUTSIDE OF AUTHORIZED AND APPROVED RECIPIENTS 3) There was a meeting yesterday, where I think the focus was the construction of these terminals. There was security in place during the construction of the terminals, they should probably have security in place during truck terminal construction, which sits right next to the terminal itself. 4) Fencing the outer perimeter is being finished up and paint crews are on site. It seems like there are two paint crews, they are finishing pipes first, then will work on the tanks. estimated that it will take until July to finish the tanks. s the relatively new, permanent Sunoco lead in the Williston area. TigerSwan Prepared for Energy Transfer Partners 10