EDMUND G. BROWN JR.
GOVERNOR

MARK S. GHILARDUCCI
DIRECTOR

VIA EMAIL ONLY: willparrish2016@gmail.com

October 30, 2017

Will Parrish
Investigative Journalist
Willparrish2016@gmail.com

Subject: September 1, 2017 Request for Public Records

Dear Mr. Parrish:
Please find the attached bates stamped documents, “PARRISH PRA_000286 to 000352” in
response to your September 1, 2017 Public Records Act request. Certain information contained
within the attached response has been redacted pursuant to Government Code section 6254(f)
and is information related to ongoing criminal investigations. A record of intelligence from the
Federal Bureau of Investigation that was identified as responsive to your request was exempted
from disclosure pursuant to Government Code section 6254(f).
The documents provided herein along with the responsive documents provided to you on
October 16, 2017, satisfy your September 1, 2017 Public Records Act request. Cal OES
considers your September 1, 2017 request for documents closed.
Of course, should you have any questions, please contact me at (916) 845-8972 or by email at
pra@caloes.ca.gov.
Sincerely,

Amanda De Alba
Attorney, Office of Legal Affairs
cc: Alex Pal, Assistant Chief Counsel

3650 SCHRIEVER AVENUE, MATHER, CA 95655
(916) 845 - 8972 TELEPHONE (916) 845 - 8389 FAX

         
   

CALIFORNIA STATE THREAT ASSESSMENT CENTER, STAC
NORTHERN CALIFORNIA REGIONAL INTELLIGENCE CENTER, NCRIC

 

 

 

 

JUNE 19, 20,17 1

 

 

 

PARRISH 

 

     

   
 

CALIFORNIA REGIONAL INTELLIGENCE 

 

 

 

 

PARRISH 

 

 

  
 
 
   
   
  
   

 

STATE THREAT ASSESSMENT CENTER STAC

 

The-Bottom" Lih   

  
 
   
  

i-Wefjassess cInti- -fdscist (Antifo) and right-wing extremIst
InteractIons In California have escalated' In wolence
throughout the last 15 months.

weapons used in four California 

:?New'publlc calls by Antifa extremists advocatmg for
u'p'porters to bring firearms 

PARRISH 

 

 

CALIFORNIA STATE THREAT ASSESSMENT CENTER STAC
CALIFORNIA REGIONAL INTELLIGENCE CENTER NCRIC 7' -

 

 

Hate Crime Overview

 

otalreported hate crimes in California? largest Cltle;
V14 2% In 2016

 

 

atecrImeS based on race, ethnicity, religion, gender S?exua
'rI'eintatIon (CaIIfornIa hate crime code) 

ate crImeS trendIng towards first baCk- to- back Increase
ears as of late 2016 but less than 2007 8; 2001 ?gures

 

 

PARRISH 

 

 

 

 . . 7 . . 
LIEORNIA-STATE THREAT ASSESSMENT CENTER, STAC .
,0 HERN CALIFORNIA REGIONAL INTELLIGENCE CENTER NCRIC

 

Ext remist' Threathli;

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

PARRISH 

 

   
   
 
    
  
  
  
  

I 

 

ALIFQRNIA STATE THREAT CENTER STAC 
ORTHERN CALIFORNIA REGIONAL INTELLIGENCE CENTER NCRIC

".CaIIfornIa Escalation In AntI 
Right- -Wing Extremist VIolence

 

II extremiSt activities are well?clocumenteij,?
Viole?ntclaishes a re typical and. have escalated over thellast'15mo'nths?
in metropolita n' areas and smallerc?ities
ounter?p retests and co?opting lawful protest

Sc, from outside cities, possfibly'cthetstates

 

 

PARRISH 

  
  
 
  
  
  
 
 
  

 

 

 

 

 

rg? White Knights in California

aw. enforcement nio?tified of rally days 'prior

sta 12 -a?rii_rests

 

Grow, uef?htifas-Iswarmed the 'Klah members

 

 

 

 

PARRISH 

 

 

 

Organized by the TradItIonaIIst WOrker Party 
Goil'den State Skmheads

nedkyyieeksinadvance with permit

AntIfa/CoaIItIon to Defend Affirmative Action,

is? m. 
:lntegratlon and Immigrant Rights and Fight for 

ma?tm 19-9? 

:EquaIIty By Any Means Necessary (BAMN)
counter pretest

7stabengsat east 9? Injuries

 

PARRISH 

 

 

 

7 . -. 

 

 

 

 

 

 

 

PARRISH 

 

 

NCLASSIFI 

 

PROTEST THE IN. 
N6 
NC) snaacmma 
9 AM JUNE 26 ., STATE WEST STEPS
1-315 10?? St. I St. (Nazi Rally begins at 12 pm)

1' 

 

PARRISH 

 

 

 

 
   
    
  
  
    

CALIFORNIA STATE THREAT ASSESSMENT CENTER STAC .
NORTHERN CALIFORNIA REGIONAL INTELLIGENCE CENTER, NCRIC

PIggybackIngactIVIst Organized events
Doxxmg-wmay lead tq violehce or threats

IVIemesand trO . ing

 

PotentIalDDOS attacks

FaISEflags and fa se informat'io 

 

  COmm-On?Online Tactisz,

    
 
  

PARRISH 

 

 

 

CALIFORNIA STATE THREAT ASSESSMENT CENTER STAC 7- -
.3- NORTHERN CALIFORNIA REGIONAL INTELLIGENCE CENTER NCRIC 

Outlook

are ;IIker to contmue to See these
nteractIOns Involve escalated violent
f5 jadgmg from recent Antifa public
aIIs foraggresswe tactics and the
Success Of these tactics.

nIne extremlst and Communist

 

 

 

 

 

 

PARRISH 

 

 

    
 

1 .i'fgf OFFICIAL LLSE ONLY 2}

 

7 ALIFORNIA STATE THREAT ASSESSMENT CENTER, STAC 
-. NORTHERN CALIFORNIA REGIONAL INTELLIGENCE NCRIC

  

      
   

 

 

A Key TakeawayS 

 

tungn?rearms tO events suggests we will continue to see these?
te"d__ Violent tactics - .. . .

     

 

 

 

PARRISH 

 

   
  

 
 
 

STATE THREAT ASSESSMENT CENTER STAC 
ORTHERN CALIFORNIA REGIONAL INTELLIGENCE CENTER NCRIC

 

 

 

     

 

 

PARRISH 

 OFFICIAL USE ONLY

JOINT INTELLIGENCE BULLETIN
26 June 2017

   

California: Escalation in Anti-Fascist, Right?Wing Extremist Violence

VIOlent Clashes between left- and rIght-wmg extremists in CalIfornIa in the last 16 months reflect
Ideological rIvalrIes tracmg back- to the 1930s in Europe and the United States

We assess that anti-fascist (Antifa) and right-wing extremist interactions in California have
escalated in violence throughout the last 16 months, judging from a State Threat Assessment Center
(STAC) and Northern California Regional Intelligence Center (NCRIC) review of incidents and open-
source reports from February 2016-May 2017. Weapons used at a February 2016 clash included a flag
pole, two-by-fours, and a knife, while at a separate incident four months later police discovered an
abandoned firearm. 1'2 Public calls by Antifa extremists earlier this year advocating for supporters to
bring firearms to events points to possible further escalation. 3?

- Antifa and right-wing violent clashes in
California have largely occurred in metropolitan areas like
Sacramento, Berkeley and Anaheim. Based on arrest
reports, the number of individuals attending rallies and
counter-protests, and media intervieWs with attendees
suggests that some individuals probably are traveling to
these events from outside cities and possibly other
states.?6

- (U) The first incident reviewed from the last 16 months
involved a Ku Kiux Klan rally at Pearson Park in
Anaheim on 27 February 2016. Several dozen Antifa
extremists initiated an altercation with the Klansmen
that led to multiple injuries and three stabbings.7 Seven
Antifas were charged with assault, battery, or resisting
arrest. Five Klansmen were later released without charges,
according to press reports.8'9

 

(U) Fascist salute at Berkeley rally
(U) Source: itsgolngdown.org

- - (U) On 26 June 2016, the white nationalist extremist group
the Traditionalist Worker held an event with the
Golden State SkinheadsUSPER infront ofthe Sacramento
State Capitol where they encountered Antifa extremists,
resulting in a clash involving knives, bottles, bricks, and .
chunks of concrete.??11 A firearm was found abandoned (U) Antifascits mspiay ?ag during counter~protest
on the ground where the melee broke out, according to (U) Source= itsgoingdown- org
the Sacramento Police Department};13

 

- (U) In response to UC BerkeleyUSPER cancelling a 1 February 2017 appearance by former BreitbartUSPER

editor Milo Yiannopoulos because of violence attributed to Antifa activists, right- w?ing groups held
two events in Berkeley In the name of free speech. Both resulted in violent clashes when Antifa

 

THE STAC AND NCRIC JOINT INTELLIGENCE BULLETIN PROVIDES COMPREHENSIVE ANALYSIS OF OR UPDATES OF EXISTING, INTELLIGENCE ISSUESWARNING: This document Is the exclusive property ofthe California State Threat Assessment Center (STAC) and Northern California Regional Intelligence Center (NCRIC) and is
OFFICIAL USE ONLY It contains information that may be exempt from public release under the California Public Records Act (Govt. Code Sec. 6250, etseqn) It
is to be controlled, stored, handled, transmitted, distributed and disposed of in accordance with STAC policy relating to information and Is not to be released to the public, the media,
or other personnel who do not have a valid need- to- know without prior approval of an authorized STAC official.

OFFICIAL USE ONLY

PARRISH 
Form 

 

 

UNCLAS8EFIEDHFOR OFFICIAL USE ONLY

extremists showed up. At a rally held on 4 March 2017, Antifa and right?wing (extremists clashed .
again, leading to several injuries and ten arrests. This time, authorities confiscated metal pipes, bats,
bricks, and protective gear?such as helmets, shin guards, and industrial respirators?from multiple
attendees, according to multiple media reports.15'16'17

- At a subsequent event on 15 April 2017, clashes broke out between individuals and
groups representing a wide array of ideologies, including Antifa and right-wing individuals using
fascist salutes and white nationalist symbology.18 Pepper spray, fireworks, knives, stun guns and
poles were used or confiscated during theclash, highlighting additional violent tactics being used
during clashes.19

We assess that Antifa and right-wing extremists
are leveraging photos and videos from violent clashes by
featuring them increasingly in online prOpaganda campaigns
to garner support, recruit, and mobilize followers for future
events.

- Anti-fascist organizations such as By Any Means
Necessary took a prominent role in
the April UC'Berkeley clashes, and the June 2016 clashes in
Sacramento?uses social media and its website to mobilize
anti-fascist collectives for counter-protests.20

    

994W 

- Right-wing extremist groups like the u) Traditibnalistokers Party poster
Traditionalist Worker Party use their website and social (U) Source: FacebookUSPE"
media platforms to post propaganda, recruit, and promote
rallies across the United States, including for the June 2016 rally at the State Capitol in"
Sacramento.21 

 

7- Social media and online activities provide centralized platforms for extremist groups to
communicate and promote events, extending the amount of time supporters have to plan for
mobilization and travel.

Based on recent Antifa public calls for the use of aggressive tactics and the perceived 
success of these tactics we are likely to continue to see Antifa and right-wing extremist interactions at
rallies and counter-protests that involve escalated violent tactics.

Radical elements within Antifa are now calling for more aggressive tactics afterthe most
recent violent clash in April 2017 in Berkeley, according to press reporting and online forums. 22'?
They are calling for suppOrters to bring firearms to events, apply for concealed carry permits, and
obtain combat training.24 -

Antifa and right-wing groups? social media sites and websites often promote videos and
imagery of violent clashes, suggesting they believe that using tactics is a
successful way of promoting and defending their extremist narratives.

OFFICIAL USE ONLY

Form PARRISH 

 

 

 OFFICIAL USE ONLY

(U) ADMINISTRATIVE NOTE

(U) For comments or questions related to the content Or dissemination of this document, please contact the STAC

at (916)636 2900 or STACQcaloes. ca. gov.

(U) TRACKED BY

(U) HSEC 8.1

(U) STAC KEY INTELLIGENCE QUESTIONS

(U) KIQ 2.3; KIQ 4.3

(U) FEEDBACK

(U) The STAC encourages your feedback using the survey found at 

(U) ENDNOTES

 

1 (U) Online Newspaper Article; James Queally; Los Angeles Times; ?Ku Klux Klan rally In Anaheim erupts In violence; 3 are stabbed and 13
arrested?; 29 February 


2 (U) Online Newspaper Article; Joseph Serna; Los Angeles Times; ?Nee-Nazis did n't start the violence at state Capitol, police say?; 27 June 2016;


3 (U) Internet Site; Mac Salvo; Vessel Training, Better Equipment, Antifa Prepares for War After Berkeley BeatDown?;
accessed on 24 April 2017

(U) Internet Site; Frances Dinkelspiel and Natalie Orenstein; Berkeleyside; 17 April 2017; http: berkeleyside. com/2017/O4/17/exactlv~
turned- downtown- berkelev? battlefield- april 15/

Internet Site; Shane Bauer; MotherJones; Went Behind the Front Lines With the Far-Right Agitators Who Invaded Berkeley?; 18 April
2017; http: motheriones. com/poiitics/2017/04/far? right- whlte- s?upremacists- berkelev protests antifa-trump/

Internet Site; Nixie; Berkely Police Department; 17 April 2017; "Police Release Names of Civic Park Arrestees";
ld=1888726

7 (U) Online Newspaper Article; James Queally; Los Angeles Times; "Ku [<qu Klan rally In Anaheim erupts in violence; 3 are stabbed and 13
arrested"; 29 February 2016; 
20160227?st0ry.htm 

8 (U) Onli ine Newspaper Article, James Queally; Los Angeles Times; "Counter?protesters charged with attacking members during bloody
Anaheim rally'; 30June 2016; http. iatimes. com/IocaI/lanow/la- -me? In- anaheim charaed- 20160630- s-nap- story. 

9 (U) Online Newspaper ArticlefAnh Do, Richard Winton and Matt Hamilton; Los Angeles Times; ?5 members released from Jail after brawl
in Anaheim"; 28 February 2016; 

1? (U) Online Newspaper Article; James Queally; Los Angeles Times; "Violence in Sacramento shows old and new faces of white extremism?; 27
June 2016; 

(U) Internet Site; ??Quite a large fightz' At least 10 injured some stabbed at California rally?; 26 June 2016;


12 (U) lbid.

?3 (U) Online Newspaper Article; Joseph Serna; Los Angeles Times; ?Nee-Nazis didn?t start the violence at state Capitol, police say?; 27 June
2016; 

OFFICIAL USE ONLY

Form 

 

 

 OFFICIAL USE ONLY

 

14 (U) Online Newspaper Article; Thomas Fuller and Christopher Melee; New York Times; "Berkeley Cancels Milo Yiannopouios Speech, and
Donald Trump Tweets Outrage?; 1 February 2017; 
r=0

15 (U) Online Newspaper Article; Amy Wang; Washington Post; ?Pro- -Trump rally In Berkeley turns violent as protesters clash with the
president's supporters?; 5 March 2017; washingtonpost. com/news/post- nation/wp/2017/03/05/pro- -trump? railv?In- berkelev-
turns-violent as- protesters-ciash- with- the- presidents supporters/?utm term: .5f0bedbb4659

16 (U) Online Newspaper Article; Peter H. King and Ruben Vives; Los Angeles Times; "Violence breaks out at pro-Trump rally In Berkeley?; 5
March 2017; -

17 (U) Internet Site; Associated Press; "10 Arrested in Berkeley Pro~Trump That Turned Violent?; 4 March 2017;


18 (U) Internet Site; Shane Bauer; MotherJones; Went Behind the Front Lines With the Far? Right Agitators Who Invaded Berkeley?; 18 April
2017; http: motheriones. com/politi ics/2017/04/far? right-white- -supremacists berkelev? ?-protests antifa? trump/

Online Newspaper Article; Paige St. John; Los Angeles Times; ?21 arrested as hundreds of Trump supporters and counter-protesters clash
at Berkeley rally 15 April 2017; 

2? (U) Internet Site; FOR FASCISTSI Mass, militant demonstration shuts down Sacramento Neo-Nazi rally"; 26 June
2017; 

21 (U) Internet Site; Traditionalist Worker Party; ropaganda?; accessed 24 April .2017

22 (U) Internet Site; IViac Salvo; Vessel Training, Better Equipment, Antifa Prepares for War After Berkeley Beat Down?;

accessed on 24 April 2017

Internet Site; it?s Going Down; "Forming An Antlfa Group. A Manual"; 16 February 2017; //Itsg0lngdown. org/formingan- antifa-
rou ?a manual

Internet Site; Mac Salvo; Vessel News. ;?'Combat Training, Better Equipment, :Antifa Prepares for War After Berkeley Beat Down?;
http: //vesseinews.i io/combat?training better- equipment- -guns- -antifa? ?prebares- war? berkeiev?beatl; accessed on 24Aprl  2017

OFFICIAL USE ONLY

Form 

PARRISH 

 

 

   
 

ENFORCEMENT SENSITIVE

Northen?aiifamiaRegIonam 
intelligence Center

Fusing information, Talent And Training For A Safer;

 

Assessment Patriot Prayer Freedom Rally, 26 August 2017 . 

23 August 2017

This threat assessment addresses potential threats to Patriothrayer Freedom Rally ~26 August, 2pm?5pm

NCRIC internal databases were queried on 08/21 yielding NEGATIVE results for planned criminal or terrorist
activity related to the Patriot Prayer.

After a review of local SAR reporting, the NCRIC DOES have information indicating possible criminal or
terrorist activity related to the event the attendees, and the locations affiliated with the Patriot Prayer event.

0 The Is aware of a posting on Facebook on August 13 by an individual with the handle ?Greg Rios?
stating that he would be seen on the news ?running people down? at the ?racist march In the bay.? The FBI and
the San Francisco Police Department are continuing to investigate this matter.

Open source queries were conducted on 08/17 08/23 yielding POSITIVE results.

- There is a wealth of inflammatory rhetoric around this event which aims to incite action on both
sides. The ?Unite the Right? Rally in Charlottesviile, Virginia likely stoked tension among various political and
extremist groups around the country. Unmitig?ated interaction between ideologically opposed groups at political

events is likely to result' In civil disobedience, vandalism, and possible violence at the Patriot Prayer Freedom
Rally.

0 Various comments on social media characterize upcoming political rallies in hostile terms. Postings
by @BasedSticlelan, a confirmed speaker at the Patriot Prayer Freedom Rally, have described upcoming events
as ?battles? or ??attacks which require ?warriors? to? suit up and boot.?

0 The NCRIC is aware of concerns that various counter?protesters have instigated a counter?rally called 
"No Hate in Our City? which will begin three hours earlier than the Patriot Prayer. Militant counter-protesters
may take opportunities to confront those supporting the freedom rally, including possible arrival from the
water, on paddleboards and kayaks.

 

HANDLING NOTICE: This Information is the property of the NCRIC and may be distributed to state, tribal and local government law enforcement officials on a need? 
to?know basis. This document contains sensitive information FOR OFFICIAL USE ONLY that cannot be released to the public, the media, or other personneiwho do
not have a valid "need~to~i<now" without prior NCRIC approval. Further distribution without NCRIC authorization Is prohibited.

LAW ENFORCEMENT SENSITIVE

PARRISH 

 

 

 ENFORCEMENT SENSITIVE

The NCRIC is aware that concealed weapons with permits are allowed at Crissy Field.

Crimes such as theft, assault, and alcohol-related disturbances in and around this event are expected as with
any large public gathering. The presence of a large number ofspectators and media coverage could make this event an
attractive soft target for extremists seeking an opportunity to execute an act of terrorism. Domestic extremists have
employed vehicle ramming against pedestrians as a method of attack.

It is vital that law enforcement, security, organizers, and participants stay vigilant, remain aware of their
surroundings, and report suspicious activity to the NCRIC at ht:tps [[ncric. org or (866) 367? 8847. Report urgent threat
information to the FBI at (415) 553 7400.

 

Attached you will find a PDF titled ?Standing Concerns at Major Public Events,? an assessment of general
standing concerns for public officials which may answer concerns you man have. Please contact dutvofficer@ncric.ca.aov
or call 1.866.367.8847 if you have any further questions.

 

YOUR SITUATIONAL AWARENESS (FYSA) ONLY This is FYSA only, as protests are considered a form of
protected speech under the First Amendment of the US. Constitution. The First Amendment protects all forms of speech,
including protest activity, except in very specific circumstances. Unlawful activity, including trespassing, harassment, or
hindering others in their own lawful activities is not protected activity. The NCRIC does not monitor legal protest activity
where no criminal nexus has been established or determined.

(U) Tracked by: 8.2.2, 8.5.1

 

HANDLING NOTICE: This information is the property of the NCRIC and may be distributed to state, tribal and local government law enforcement officials on a need-
to-know basis. This document contains sensitive information FOR OFFICIAL USE ONLY that cannot be released to the public, the media, or other personnel who do-
not have a valid "need-to-know?I without prior NCRIC approval Further distribution without NCRIC authorization is prohibited

   

 

LAW ENFORCEMENT SENSITIVE .

PARRISH 

 

 

 

PARSRIH 

 

 

PARRISH 

7* Nerthem Caiifomia Region?
.. Center.

0

Fa mg i Matters, Tammi And

 

Radica' Left in Californiais?7 
RadicalRight in California; 

Clashes

Violent Anti-FasciSt Strategies, Tactics, and Messaging

 

 

 

 

PARRISH a




Anti-Fascists (Antifa) 

Urban?based

  Northem Callfomia Regions:
intelligence Center

 

Anonymous collectives inall major'cItIes and suburbs

Typically white college age'(1l8 4 30) male and female

Focuses: Identity capItalIsm, statism, white supremacists
Comprised of radical anarchiSts, socialists,communists, anti?racist skinheads

 

 

 

 

.5 ?we: I

 

 

PARRISH 

 

 

Northern Gaitfomaa ?Regsona ms

ntei Igence Center

 

 

Golden State Skinheads (GSS) 
Trad-itionalist Workers Pa3_rtyl(TWP) .
Ku Klux Klan .

- Suburban-Rural based
- Small groups, many convicts
?White males ages 18950s? 
- Focuses. Ethno- state, fascism, anti- Immigration anti?ZOG

- Comprised of National Radioal Ethno?
nationalists 

 

 

a

 

i
2

 

 

PARRISH 



'N-erthem' Caiifemia Regime:

Center

Fe" :13 informatien, iai?nt-IAnd-Eraini '3 

 

27 February 2016 - Anaheim, CA 
Antifa initiates altercation With 
Multiple injuries and3sta'3bbin?gs . I. 
. Seven Antifa Charged withassault, battery,and resisting arrest

- All Klansmen laterireleased without charges?

 

 

 

 


i;

 

 

 

PARRISH 

Nerthem Caisfemia Regime

inteikgence Center .

 

26 June 2016 3 Sacramento, CA



Antifa initIates altercatIo?n'WIthGolden State Skinhead and
Traditionalist Workers Party members)" 

Multiple injuries and 10 stabbings
Firearm recovered'but no attribution

 

 

 

 

 

 

 

PARRISH 

4

   





w?

em California Reg-ma; 

lligenoe' Center

 

March 2017 - Berkeley,

Antifa initiates altercation rightwing

It

Free Speech? gathering

Response to 1 February 2017 riots?0n UC Berkeley Campus against
Milo Yiannopolousscheduledtalk

. 10 arrests andmultiple injuries

 

 

 

a
i,
i

 

 

 
 
 
 

PARRISH 

North?e e" Caiifo me Regiona

ii?genoe Center

Fusing infetmatien, TaientjAnd framing I I I. Safer-S?e?ie

 

15 April 2017 - Berkeley, CA 
Anti-fa initiates altercationatright wing"Free Speech? gathering
. 15 arrests 
. Radical Ieft? andright-wing elements were embedded within more
moderate movements. 

 

. Weapons confisCated: Bats,poies,bricks, knives

 

 

 

 

 


3;

 

 

  
 
 

PARRISH 

- Northern Caiifomia Region ..

kite :gen eCente-r
I tie n/faien An 

 

Violent Anti-FaSCIst Strategy, Tactics, and
Mess gIng

Within the last year an ti- fasc organizers have effected
unlawful violence again their political Opponents and non?
aligned bystanders.

- Violent anti ?fa5cists hav ve relIed on a narrow strategy, militant-
like tradecraft, and am: ompromI sing mesSaging.

 



 

 

 

PARRISH 

To date, the NCRIC recognizes

three core violent anti
strategies: 

Reduce, Denny, and Eliminate 
Platformsfor Contra rian Speech

Advocate Violence Against-Political 1" 

Opponents

Distribute Propaganda andlAdvance
Disinformation 

'a



fascist  

 

angelica-can er

Regiona-

 

 

 

PARRISH 

Northern Caltfomra Regronal 

intelligence Center
'l n?aientAndi?

 

Tactics

Some violent anti faSCIsts may have had access to, 0r been influenced
by,m . ilitary tsylet raInIng and knowledge -

Observable tactic demonstrate a lImIted understandIng of adapted,
or modified, mI liita nt tactIcs

- These tactics canbelearned frompublicly acCessible guerrilla warfare
manuals and bo 0ks, and Online media cOntent circulated amongst
violent anti-fascist communItIes. 

 

?NI??mu

 

 

 

PARRISH 

N-orthem California Regiona'

 

lnteiliigenoe Center

Easing information, talent-An

 

?Black Blocs? 

Participants dress uniformly in blackclothingincluding Iblack ski masks, black scarves, and
accessories such as backpacksto conceal?Weapons; new clothing, first aid supplies, and
other provisions. ?7 -

Uniformity aids in the concealment of:
participants' identities forthe purpose   
of evading arrest. 1 

 

 

?Mm?

 

 

 

PARRISH 

Northern California Regional

intelligence Center 

sing informationifei . 

 

Improvised Incendiary Devices, 

Fireworks, and Other Explosivesji_f7

Violent anti?fascists have been observed 
employing both commercialand hOmemade
pyrotechnics including roadflares, suspected 
80?5, roman candles, improvised incendiary-
devices, and smoke bombs.

 

 

 

 

PARRISH 

a

Mm em carironia Region

Inter-rigence 0e er 

as Ir 3?11:

 

Makeshift and Improvised Bricks Dumpsters
Weapons - Hammers. - Soda cans

. Knives and box razors - Rocks Paint and feces filled balloons

Stun Guns

.WOOd?nIdOWels   - Bike racks and traffic barriers
'Pipes a . 'IB?ea?r and'pepper spray' a - Eggs

. Bike locks 2' - -, Boards 9 If it can be thrown or swung and
isn?t nailed 

 

 

 

PARRISH 

- Northern Canto-mire Regional

ntellrgence Center

aging informatron, Taient And Ira n? For? A Safer

 

Area. Denial

0 Violent have constructed roadblocks from road?improvement site materials,
dumpsters, trash cans, cinder! blocks and other non- secure materials including garbage.

An infrequent tactic to divert resources has been to ignite these materials on fire.

- Roadblocks limit ?rst-responderSIte access.

 

 

 

 

 

 

PARRISH 

Northern. Caiifomia Regionai

i nteii?genoe Center

'Eusing IaiemAnd mining Foi'A safe- a 

 

Human Shields!

Violent anti-fascists frequently integrate Intocrowds Ofpeacefui bystanders limiting authority
response options. 

 

 

 

 

 
 
  
 

PARRISH 

Northern California Regional.

.lntellig.enoe Center

I Tater}: And rain?- 9 

 

Element of Surprise

Violent anti?fascists have avoided by'assembling at an unknown,
off?site locations before Collectively moving toa given venue-creating an element of surprise
over responding authorities. I 


1: Febnsasym?s? 

mvwme Suspectedkagicag?ma
1 him WCmm?mS?a

 

{it Berkeley Wotan:
Bemnsha?ons 2 ?tment 

     

              

    

 

 
          

mm - am

Mr Mature:

  

fame-l Rm

awn?mm

 

 

 

Rained
?M?Nmbm 5?15

 

 

 



 

PARRISH 

ING?hem California Regime 1 1 f-

 

Reconnaissance and Surveillance
Violent Anti-fascists have displayed evidenceof p're?operational reconnai?ssanceand event
surveillance. 7 A 

- On 1 February, violent anti-efasci'stsarrived withthetools necessary to quickly dismantle
police barricades, and createfoperational space; (See images below)

      

 

 

 

 

 

 

PARRISH 

Northern Cattfomra Regrona

lrrtetl gence Center

rt 7t formation, tatertt Artgt tra? 

 

Communication

Violent anti-fascists have been observed ImplementIngmultIple, overlapping, communication
platforms inCluding bullhorns, phone apps, rallymarkers, and command and response words
allowing them to continuously COOrdinate their actionsifOnemethod is compromised or fails.

Him} 

 

Artww. .av't:

?Ertd?rtowEnct 10?: And: do the Vault 7
Reretattorts Mean Eng ts Usetess?

$3!me!kame - 9 

By Crimethin: Eat-Workers Catfeztiue - march 27, 201 7 6) 1085

 

 

 




 

 

 

 

PARRISH 

 

Information Campaigns

3;
2

2

Northern California Regional?ll
intelligence. C-enter .

1 ?lnformationl-Tala And'Traipi?

 

?Propaganda by the Deed? ?a
terroriSt act of political violence
aimed against state targets, I 
sometimes populations, with-the
objective of creating a mediaevent
capable of energizing populations to
bring about state revolution or social
transformation. Today?s re'VOlutionary .
uses the weight of the mediaagainst I l. l' 
the media.? Dr. Neville Bolt? 

- Draws attentiOn to thecause 
Highlights perceived capabilities}

Seeks to inspire new members-,4,

 

.



 

 

 

 

PARRISH 

      

 

via:

 

 

 

Northern

Fasinl?g-J Info

 

rm

  


3* 3 I 0 
California Reg?lpnal Intelligence Center



i
g.
0

 

ti

 

db, fdlent Ar:

 

 

?m
Training For A Safer Society

 

 

 

2017-b544f3ca
OFFICIAL USE ONLY

Northern California Regional.
lntelhgence Center -

Fusing Information, Talent And Training For A Safer Soc

(U) SCOPE. Advisory Bulletins provide updates and analysis on incidents and situations of interest to NCRIC .
partners including officer safety Issues threat warnings, and activity trends Information in these advisories 
may include raw reporting that ha

 

04 March 2017
(U) Violent Activists Use Black Bloc Tactics to Hijack Protest at UC Berkeley

On 1 February 2017, violent activists Employed paramilitary-style tactics against campus police, which led to
University of California officials cancelling a controversial guest speaker's appearance, according to officialwitness and
media accounts. The group's tactics to exploit peaceful protests, coordinate violent
demonstrations, and attack police and property fortheirown social and political goals.

Key Findings

0 Violent activists premeditated theiractivities, including bringing fireworks to the demonstration and
likely conducting surveillance and counter-surveillance.

Violent activists employed. Black Bloc tactics to inflict personal and property damage, and create
dramatic visuals for media coverage.

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

(U) Observed Black Bloc Tactics, Techniques, and Procedures at UC Berkeley Event

Witness re porting and onlinevideos from?the Berkeley protests indicated violent activists employed a variety
of tactics and gear, from the use of projectiles (Roman candles, improvised Incendiary devices, suspected M-BOs,
balloonsfilledwith urine, feces, and paint) and improvised weapons(baseballbats, hammers, pipes, bricks)to
protective gear(shields and helmets) and means of concealment (smoke bombs, fire extinguishers). 2They also used
megaphones and phone apps forcoordination and communication.

AccordingtowitneSs reporting, before the clashes began, Black Blocparticipants raideda
constructionsite nearthe event, stealingbricks, rocks, pipes, and anythingelsethat could be used asa
projectile. 3 ltis unknown IfthIs raId was opportunisticorpreplanned.

- Campus officials witnessed several individuals who appeared to be conducting site surveillance and
reconnaissance hours priortothe event.4

- Black Bloc participants avoided early detection by assembling at an unknown, off?campus location
before marching tothe speakingvenue.5

HANDLING NOTICE: This information Isthe property ofthe NCBIC and may be distributed to state tribal and local governmentlaw enforcement officials on a need-
to- know basis. This document containssensitive information FOR OFFICIAL USE cannot be releasedto the public, the media, or other personnel who do

 

OFFICIAL USE ONLY
Refit 

 

2017-b544f30a
UN OFFICIAL USE ON LY

- Upon arrival at the speaking ve nue, Black Bloc participants integrated intothe crowd of peaceful
protestors thereby reducing enforcement response options.6 -

- Black Bloc participants established rapid control ofthearea around the speaking venue and used this
space to maintain an aggressive posture towards police.7 Black Bloc participants were observed initiating
violence against lawenforcement, event attendees, and property.

- Black Bloc participants used basic command and control overelements of4?5 people and 12-13
people as seen on a video posted afterthe clashes. Affiliated groups also used a series of keywords to
communicate back and fOrthF? 

- A local news media outlet recorded Black Bloc participants quickly dismantling the event barriCades
at strategic points (supportingthe notion of pre?event reconnaissance) creating operational space (see figures 1-
3).9 These barricades were then used as battering ramsto smash windows (see figure 4).10

- The group facilitated criminal activity by using pyrotechnics, explosives, smoke bombs, and fire
extinguishers to create coverand a visual effect (seefigures Sand 

. (U) Outlook

Law enforcement is likelyto encounter similarviolenttactics where peaceful protests are hijacked by violent
activistsin the future. Agroup has claimed that similar clashes will occur should the speakerreturn as planned in
April.?13 Law enforcement may also face new or evolving techniquesfrom violent activists, who have multiple online
and offline resources available to draw on. These additional tactics could be used in an attempt to provoke the use of
force by law enforcement. If police were perceived to respond with excessive force against peaceful protestors, it could
validate 

OFFICIAL USE ONLY

Ref# 

 

 

 

2017~b544f3ca
OFFECIAL USE ONLY

. Figure 1: Black Bloc participants separate event

barricades at strategic points. See (3.5. C. Media in
sources.

 

Figure 2: Black Bloc participants spread the barricades
before disassemblingthemfor use as weapons. See
C.5. C. Media in sources.

 

Figure 3: Black Bloc participants create an
unobstructed operational space orlane. See C.
Media in sources.

 

 

OFFICIAL USE ONLY

Ref PARRISH 

 

 

2017?b544f30a
OFFICIAL USE ONLY

 

Figure 4: Black Bloc participants disassembled event
barricades and opportunistically used them as
weapons to smash speaking venue windows. See C.5.C.
Media in sources.

Figure 5: Black Block participants fired roman candles
and otherimprovised incendiary devices at campus
police. See Sky Visual Production in sources.

Figure 6: Black Block participants used fire
extinguishers to create coverand visual effect. See
C. Media in sources.

 

OFFICIAL USE ONLY

Ref PARRISH 

 

 

 

2017-b544f3ca 
OFFICIAL USE ONLY

(U) Sources

 

Official witness statement in i nterviewwith author, February7, 2017

2 C.S.C. Media Group USA. "Cove rage And Footage Of Mi Ion UC Berkeley Riots". Filmed [February 2017].YouTube video, 10:58. Posted
Fe bru ary 1, 2017. 

3 Official witness statement in i ntervi ewwith author, February7, 2017
4 Official witness statement in interviewwith author, February7, 2017
5 Official witness statement in i nterviewwith author, February 7, 2017

SkyVisual Production. "Watch: UC Berkeley Brutal Riot, Police Vs Protestorl February 2 2017 Anti ~Tru mp Rally". Filmed February 2,
2017. Youtu be Video, 10:08. Posted February 2, 2017. utu 

7 SkyVisual Production. "Watch: UC Berkeley Brutal Riot, Police Vs Protestorl February2 2017 Anti -Trump Rally". Filmed February 2,
2017. Youtube Video, 10:08. Posted February 2, 2017. be.com (1:20)

8 Sky Visual Production. "Watch: UC Berkeley Brutal Riot, Police Vs Protestorl February2 2017 Anti -Trump Rally". Filmed February2,
2017. Youtube Video, 10:08. Posted February 2, 2017. Hxka6J0 (1:13)

9 C.S.C. Media Group USA. "Cove rage And Footage Of  V iio~ UC Berkeley Riots". Filmed February 1, 2017. YouTube video, 10:58. Posted
February 1, 2017. See (00:17)

10 C.S.C. Media Group USA. "Cove rage And Footage Of Mi Io UC Berkeley Ri ots". Filmed Feb ruary 1, 2017. YouTu be vi deo, 10:58.
PoSted February 1, 2017. See (05:47)

11 SkyVisual Production. "Watch: UC Berkeley Brutal Riot, Police Vs Protestorl Februa ry 2 2017 Anti "Trump Rally". Filmed February 2,
2017. Youtube Video, 10:08. Posted February 2, 2017. (4:27)

12 Nash, Charlie, CALLS BERKELEY RIOT ING LY REPEATI Ml LO NEWS,
Fe bruary 8, 2017, rns?reoeat-if?milo?retums/

13 Sciacca, Annie, "MiloYiannopoulos plans to retu rnto Berkeley",THE MERCURY NEWS, Fe bruary4, 2017,
ews.co 

OFFICIAL USE ONLY
Ref 

 

 

 OFFICIAL USE ONLY

Northern California Regional
Intelligence Center 

SCOPE: Advisory Bulletins provide updates and analysis on inCIdents and situatIons ofi erest to
NCRIC partners including off cer safety' Issues, threat warnings, and activity trends. Information In these-
advisories may include raw reporting that ha

 

21 August 207

Violent Tactics Showcased at Berkeley Riots Likely to be Used at
. Future Demonstrations

Tactics used by violent Anti-fascists at events in Berkeley on 1 February,'4 March, and 15 April 2017 highlight
their ability to exploit peaceful protests with coordinated violent demonstrations, attack law enforcement personnel,
destroy property, and conduct information campaigns to advance their socio- political goals. This Advisory Bulletin is
intended to inform law enforcement involved In operational planning and event safety at gatherings that violent anti?
fascist elements may target.

(U) Identified Tactics 

We assess that violent Anti-fascists (Antifa), including anarchist extremists, are likely to coordinate and
drill tactics for use at organized events in the San Francisco Bay Area. Recently observed tactics suggest that some

- violent anti?fascists mayhave had acceSs to limited military style training or knowledge, possibly from publicly accessible
guerrilla warfare manuals, books, and online media content. Tactics witnessed at riots in Berkeley in 2017 include: 13'?

"Black Blocs?:Violent anti-fascists have participated in ?Black Blocs? where participants dress
uniformly in black clothing including black ski masks and black scarves. Uniformity aids in the concealment of
participants' identities to evade arrest. They carry backpacks to conceal weapons, carry a change of clOthes, and,
first aid supplies along with other provisions.5'5'7

Improvised Incendiary Devices, Fireworks, and Other-Explosives: Violent anti-fascists have used
commercial and homemade pyrotechnics including suspected M?80?s, roman candles, improvised incendiary
devices, and smoke bombsg'gim -

 

HANDLING NOTICE: This information is the property of the NCRIC and may be distributed to state, tribal and local government law enforcement officials on a need-
to-know basis. This document contains sensitive information FOR OFFICIAL USE ONLY that cannot be released to the public, the media, or other personnel who do
not have a valid "need-to?know" without prior NCRIC approval Further distribution without NCRIC auth riz ti i hiblt 

   

 

OFFICIAL USE ONLY

Form 

 

 

 OFFICIAL USE ONLY

 

Improvised Weapons: Violent anti-fascists at Berkeley Riots have used improvised weapons
including, but not limited to pipes, bricks, hammers, bike locks, rocks, wooden dowels, bear spray, pepper spray,
boards, dumpsters, soda cans, androad and police barricades such-as bike racks and 

Area Denial: Violent anti?fascists have been observed
gathering local materials to construct traffic obstacles. They have
constructed roadblocks from road-improvement site materials,
dumpsters, trash cans, cinder blocks and other unsecured materials
including garbage. Violent anti-fascists occasionally set these 
materials on fire to divert first responder resources. Roadblocks deny
access to first?responders by preventing'traffic movement, further 
tying up resources?:16

. Human Shields: Violent anti-fascists at the 1 February event at UC Berkeley limited law enforcement
response options by intermingling with crowds of peaceful protesters.17 18

Element of Surprise: Violent anti -fascists have avoided early detection at some events by assembling
off-site before moving to a given vemie, taking responding authorities by surprise. 19

Reconnaissance Surveillance: Violent Anti-fascists appear to haVe used reconnaissance and
surveillance to gain knowledge about event security gaps and infiltration opportunities.20

I . .
Communication: Violent anti-fascists have used multiple, overlapping communication platforms
including megaphones, phone apps such as Signal, rally markers such as flags, and command and response
words to continue to coordinate their actions if one communication method is compromised or fails. 21:22:23

(U) Outlook

Law enforcement is likely to encounter similar violent tactics where peaceful protests are co?opted by
violent anti?fascists in the future Law enforcement may also face new or evolving techniques from violent antl~fascists
and anarchist extremists, who have-multiple online and offline resources available to draw upon. Violent anti?fascists
may attempt to develop'new tactics targeting law enforcement that could provoke responding officers into using
perceived excessive force against populations consisting of both violent and non?violent attendees.? if police are
perceived to respond with excessive force against peaceful protestors, it could embolden violent anti-fascist calls to
increase violence against law enforcement.

(U) Tracked by: HSEC 8.1, 8.8

OFFICIAL USE ONLY

Form 

 

 

 

 

 OFFICIAL USE ONLY

(U) Sources

 

1 (U) Clark, J., WAY FIGHT: REVOLUTIONARY AND ARMED accessed 9 August 2017,
//docs. wixstatic. com/ugd/c1543a pdf, archive: 

PIECE NOW PEACE LATER: an anarchist introduction to firearms, accessed 9 August 2017,
//tucsonabc. files. wordpress. com/2013/10/?piece now- peace later. 
3 (U) Marighelia, Carlos. Mini Manual Of The Urban Guerrilla. 1969. Abraham Guilien Press Arm The Spirit 2002,
//ia600608 us archive. org/17/items/Mini- manuaiOfl'heUrbanGuerrilia 
4 (U) Resources, Redneck Revolt: PUTTING THE RED BACK IN REDNECK, -resources
5 (U) ?Graphic video of Black Bloc sabatoge[SIC] of peaceful protest at UC Berkeley," Youtube, uploaded by John Mongani, 5
February 2017, voutube. com/watch?v= xthMOWDth
6 (U) ?Antifa crash Free Speech Rally In Berkeley,? Youtube, uploaded by This Informed, 15 April 2017,
voutube. com/watch?v= 

?#march4trump' In Berkeley,? Youtube, uploaded byJacob Rex, 4 March 2017,

8 (U) ?Police Get Into Shootout with Antifa Protestors at UC Berkeley Milo Yiannopouios Event 2/1/2017,? Youtube, uploaded by
SUPERNOVA, 1 February 2017, (See 01:09 Roman Candie, 01:41 Commercial
Firework)
9 (U) "Coverage And Footage Of Milo? UC Berkeley Riots, Youtube, uploaded by The Common Sense Conservative, 1 February 2017,
10: 58. voutube. com/watch?v= cR8b68iXHzo, (See 00: 17 improvised incendiary Device, 00:53 Roman Candie, 01:24
Suspected M- 80, 08: 49 Improvised Incendiary Device)
1? (U) "Battle at Berkeley 111 epic final charge, Youtube, uploaded by Last Revolution Media, 19 April 2017,
voutube. com/watch?v= (See 0:50 Smoke Grenade)
11 (U) Madyun, Haaziq, Berkeley city spokesman shows weapons sized at March 4 Trump eve.,nt KRON 4, March 6,2017,
http: //kron4 com/2017/03/06/video? berkeiev- citv- s-pokesman ??shows~weapons seized? at- march 4 trump- event/ (See 00:10 ?Metal
pipes, axe handle, 2x4" and other improvised weapons including wooden dowels)
12 (U) @berkeieypolice. ?Officers arrested 20 people and confiscated numerous weapons at #berkeieyprotests. investigations
continue.? Twitter, 15 April 2017, 7:46 PM, IMAGE, 
13 (U) ?Raw footage from protest of Milo Yiannopouios? event at- UC Berkeley,? Youtube, uploaded by thedaiiycal, 2 February 2017,
(See 00:39 Hammer) 7

NEWS Bay Area Professor Eric Clanton Arrested for Lock Attack, Youtube, uploaded by SH UTTERSHOT45, 30 May
20.17 voutube. com/watch?v= u234vog53Fw, (See 00:39 U- Lock attack)
15 (U) ?Actually, one more tweet that didn? send Starbucks, several banks got it rough tonight. Twitter 1 February
2017, 9:30 PM, IMAGE (Roadblock), //twitter. 
15 (U) Duran, Doug, IMAGE. trash fire burns near UC Berkeley during a protest against Breitbart News editor Milo Yiannopouios.?
February 2017, 2017. Berkeley, CA. Accessed August 9, 2017. http: mercurvnews. com/2017/02/02/feb- 3- readers? ietters- free?
speech ?should rule- at berkeiev/
17 (U) "Vandals Mixed With UC Berkeley Students Protesting Yiannopouios Talk, Youtube, uploaded by CBS SF Bay Area, 1 February
2017, voutube. com/watch?v= (See 02:34? 02:50)
18 (U) 2017? BERKELEY TRUMP EXPLODE 4/15/17,? Youtube, uploaded by Mariam Najera, 19 April 2017, See (0:00
10: 27), voutube. rfibil4vc, //archive. 
19 (U) "Antifa crash Free Speech Rally In Berkeley,? Youtube, uploaded by This Informed, 15 April 2017,
voutube. com/watch?v= 
20 (U) "Coverage And Footage Of Miio? UC Berkeley Riots," Youtu be, uploaded by The Common Sense Conservative, 1 Feerary
2017. YouTube video, 10:58. Posted February 1,2017. (See 00:15 00:20)
21 (U) "Coverage And Footage Of Milo UC Berkeley Riots,? Youtube, uploaded by The Common Sense Conservative, 1 February
2017, 10:58. (See 00:53 White dove as raiiy marker)
22 (U) "Anti-Milo Protests at Berkeley Feb 2017,? Youtube, uploaded by The Thinkery, 16 March 2017,
(See 21:07 Use of megaphone command and response words, 23:17
megaphone, 23:50 megaphone, 24:40 megaphone commands)
23 (U) Crimethinc. Ex?Workers Collective, "Burner Phones and A User's Guide,? Itsgoingdown.org, 27 March 2017,


- 24 Department of Homeland Security, increase in Confrontations and Escalation in Rhetoric Between

Anarchist Extremists and Ideological Opponents Could Pose Threat to Local and Federal Law Enforcement,? 20 July 2017, extracted
Homeland Intelligence Today article is OFFICIAL USE ONLY. 

 

OFFICIAL USE ONLY

Form 24 PARRISH 

 

 

 

UNCLASSIFI ENFORCE ENT SENSITIVE

Northern Cajfmma Region
intelligence Center

Fusing Information, Talent And Training For A Safer so? e-ty

 

Freedom Rally, 26. August 203-17 

23 August 2017

This threat assessment addresses potential threats to Patriot Prayer Freedom Rally -26 August, 2pm-5pm

NCRIC internal databases were queried on 08/21 yielding NEGATIVE results for planned criminal or terrorist
activity related to the Patriot Prayer.

 

Open source queries were conducted on 08/17 - 08/23 yielding POSITIVE results.

There is a wealth of inflammatory rhetoric around this event which aims to incite action on both
sides. The "Unite the Right" Rally in Charlottesville, Virginia likely stoked tension among various political and
extremist groups around the country. Unmitig'ated interaction between ideologically opposed groups at political

events is likely to result In civil disobedience, vandalism, and possible violence at the Patriot Prayer Freedom
Rally.

Various comments on social media characterize upcoming political rallies in hostile terms. Postings
by @BasedStickIVIan,?a confirmed speaker at the Patriot Prayer Freedom Rally, have describedupcomlng events
as ?battles? or ?attacks? which require "warriors? to"suit up and boot.?

The NCRIC is aware of concerns that various counter?protesters have instigated a counter?rally called 
?No Hate in Our City? which will begin three hours earlier than the Patriot Prayer. Militant counter-protesters
may take opportunities to confront those supporting the freedbm rally, including pOssibIe arrival from the

water, on paddleboards and kayaks.

 

HANDLING NOTICE: This information Is the property of the NCRIC and may be distributed to state, tribal and local government law enforcement officials on a need-
to?know basis. This document contains sensitive Information FOR OFFICIAL USE ONLY that cannot be released to the public, the media, or other personnel who do

 

not have a valid "need-to-know" without prior NCRIC approval. Further distribution without NCRIC authorization is prohibited

 

 

LAW ENFORCEMENT SENSITIVE

PARRISH 

 

 ENFORCEMENT SENSITIVE

The NCRIC is aware that concealed weapons with permits are allowed at Crissy Field.

Crimes such as theft, assault, and alcohol?related disturbances in and around this event are expected as with
any large public gathering. The presence of a large number of spectators and media coverage could make this event an
attractive soft target for extremists seeking an opportunity to execute an act of terrorism. Domestic extremists have
employed vehicle ramming against pedestrians as a method of attack.

It is vital that 'law enforcement security, organizers, and participants stay vigilant, remain aware of their
surroundings, and report suspicious activity to the NCRIC at t:htps [[ncric. org or (866) 367? 8847. Report urgent threat
information to the at (415) 553? 7400.

Attached you will find a PDF titled ?Standing Concerns at Major Public Events,? an assessment of general
standing concerns for public officials which may answer concerns you man have. Please contact dutyofficer@ncric.ca.aov
or call 1.866.367.8847 if you have any further questions.

YOUR SITUATIONAL AWARENESS (FYSA) ONLY This is FYSA only, as protests are considered a form of
protected speech under the First Amendment of the.U.S. Constitution. The First Amendment protects all forms of speech,
including protest activity, except in very specific circumstances. Unlawful activity, including trespassing, harassment, or
hindering others in their own lawful activities is not protected" activity. The NCRIC does not monitor legal protest activity
where no criminal nexus has been established or-determined.

(U) Tracked by: 8.2.2, 8.5.1

 

 

 

HANDLING NOTICE: This Information Is the property ofthe NCRIC and may be distributed to state, tribal and local government law enforcement officials on a need?
to-know basis. This document contains sensitive information FOR OFFICIAL USE ONLY that cannot be released to the public, the media, or other personnel who do
not have a valid "need-to-know" without prior NCRIC approval. Further distribution without NCRIC authorization is prohibited

 

 

LAW ENFORCEMENT SENSITIVE .

PARRISH 

 

UNCLASSIFIED FOR OFFICIAL USE ONLY
. .. . . BULLETIN -
Orange County Intelligence Assessment Center

 
 
  

 
 
  
      



  

7 September 2017
(U) Overview

In August 2017, the hac-ktivist collective Anonymous launched Operation Domestic Terrorism, or
#OpDomesticTerrorism, in order to disrupt activities by groups and individuals perceived to be involved in

domestic terrorism.i According to Anonymous, the groups and individuals targeted in #OpDomesticTerrorism
are perceived to associate with white supremacist ideologies and those aligned with the Alt?right movement.

(U) Tactics

 

DOXING - Members of Anonymous are exposing personal identifiable information (PII) data of
persons believed to be involved in white supremacist ideology using both open source and criminal methods.

The release of PM in public forums online is commonly referred to as doxing. 

On 18 August 2017,
an unidentified user posted
usernames, passwords,
birthdays, and online monikers,
of users likely belonging to a
white supremacy website. The
release of this information could
lead to the doxedlindividuals
being further targeted to gain
more personal information, such
as home addresses. Based on 

the structure of the released (U) Symbols used online as part of #OpDomesticTerrorism
data, the data was likely . (U) Source: Twitter 
gathered through criminal methods, likely Structured Query Language (SQL) injection. A SQL injection
attack involves injecting code into a website form in order to access databases within the website that
are not meant to be accessed by the public. 

o_ (U) Political figures who are perceived to sympathize with white supremacist causes have been doxed 
by Anonymous as part of #OpDomesficTerrorism and other campaigns.

0 (U) Anonymous is encouraging members to find Alt-Right supporters and perceived white supremacists i
on social media and report them using the social media platform?s reporting tool Twitter?s ?report
abuse behavior"). Members of Anonymous are also sharing the perceived domestic terrorist users? 

profiles publically as a means to expose them,'and occasionally add gathered on the target via open 
source means. 

  

The doxing of individuals could lead to furthertargeting in the physical realm. Victims of doxing
often become the victims of financial fraud, swatting (staging a hoax event that causes a significant law
enforcement presence at a target?s home or place of work), or harassment.

 

This information should be considered UNCLASSIFIED ii FOR OFFICIAL USE ONLY unless noted and contains information that may be exempt from public release under the
Freedom of Information Act (5 USC 552). It is to be controlled. stored, handled, transmitted, distributed, and disposed of in accordance with US Department of Homeland Security policies
and Is not to be released to the media, public or other personnel who do not have a valid "need-to-knoW' and shall not be distributed beyond the original addressees without prior authorization
of the originator. Receipt acknowledges a commitment to comply with all applicable laws protecting privacy. civil rights, and civil liberties In the collection. use, analysis, retention, destruction,
sharing and disclosure of Information. If you have any questions or need additional Information, please contact the OCIAC.

 

UNCLASSIFIED FOR OFFICIAL USE ONLY

Form .

 

     
   
 

UNCLASSIFIED FOR OFFICIAL USE ONLY
INFORMA Tia-Iv BUL LE TIN 

DISTRIBUTED DENIAL OF SERVICE - Members of Anonymous are also targeting companies that
are believed to be aiding the activities of Alt?Right members or perceived white supremacist by conducting
cyber?attacks against the companies? infrastructure, namely, Distributed Denial-of?Service attacks.

. 24 August, website host DreamHost experienced a attack against the company?s Domain
Name Servers Members of Anonymous claimed credit for the attack as part of
#OpDomesticTerrorism, targeting DreamHost for hosting the website, Punished Stormer, a neo-Nazi
websitei?. DreamHost dropped Punished Stormer as a client, citing a Terms of Service violation.

attacks against DNS, particularly those belonging to large companies, have widespread
impact that can take millions of websites offline. Websites with no affiliation to the Alt- -Right or perceived white
supremacy organizations, such as critical infrastructure- related websites, can be taken offline when web h0sts
are targeted with attacks

(U) Analysis

Following the vehicle ramming attack in Charlottesville, Virginia on 12 August, members of
Anonymous and other social media users used hashtags such as #OpDomesticTerrorism and
#ExposeTheAltRight in order to publish identities and. locations of individuals who participated in the Virginia
rally. Using unique identifiers seen in photos from the rally such as tattoos, online users identified participants
and then published the information?on social media in order to alert the participant?s employers and others of
that person 5 presence at the rally. Many of those identified subsequently lost their jobs after their employers
were notified via social media. The publication of PH through popular Twitter accounts dedicated to exposing
perceived white supremacists, such as the @YesYoureRacist?V account on Twitter, which now has over

400 000 followers, can lead to the continuation and escalation of targeting in the physical realm. Additionally,

with more rallies being planned and held across the United States, the publication and targeting of participants
online can be expected to continue.

Report threats or suspicious activity to the OCIAC by submitting a tip or lead at:



(U) RELEASABLE TO:

(U) Federal, state, and local law enforcement, fusion centers, all TLOS, and emergency management personnel.
(U) Further distribution without OCIAC authorization is prohibited.

(U)Tracked by: .

 

International Business Times. ?DreamHost hit by-powerful attack after briefly hosting neo-Nazl website Dally Stormer." 25 August 2017.


1636666?utm source=soclalflowtwitter&utm Accessed 25 August 2017.

"@DreamHost on Twitter. 24 August 2017 Accessed 25 August 2017.?

lbid. Source i.

@YesYoureRacist on Twitter. 29 August 2017. Accessed 29 August 2017.

 

UNCLASSIFIED FOR OFFICIAL USE ONLY

RA 8
Form PARRISH ?00033

 

 

 

ENFORCEMENT SENSITIVE

 

OFFICER SAFETY BULLETIN
02July 2017

Self?Identified Sovereign Citizen Attempts to-Subpoena and Arrest Officers

The Central California Intelligence Center (CCIC) has prepared the following Officer Safety Bulletin to raise law
enforcement awareness of Marcus Bernard Smith IIUSPER, who has claimed to be a sovereign citizen and has attempted to
subpoena and arrest officers in the Sacramento area.

 

    

Marcus Antony SMITH

DOB: 63/17/1993

CDL: F1384849

LKA: 8551 Civic Center Drive
Elk Grove, CA 95758

- No Parole

- No Wants

- No Probation

 

 

 

 

 

SMITH has a history of resisting arrest, assault with a deadly weapon, weapons charges, drug charges and
burglary. Smith is a convicted .Felon and has been validated as a Guttah Boys gang member. .

CCIC Outlook: There has been a distinct rise of anti?law enforcement and Sovereign Citizens activity throughout
California and the United States. The presentation of a fraudulent ID and other documents matches with Sovereign Citizen
beliefs that a state issued driver's license is not required to operate a vehicle, and that driving is only a function of a
Sovereign Citizen?s right to travel as a free man. effort to subpoena, and to arrest officers is likely meant to

influence, intimidate, or retaliate against public officials. While it is not illegal to be a Sovereign Citizen, the CCIC i I

encourages reporting on any information pertaining to Sovereign Citizen refusals to cooperate with law enforcement.
Whether refusing to present a valid CDL, or other non?compliance this can be indicative of future escalations that could
result in violence. Please report suspicious activity about targeting, harassment, or surveillance of law enforcement
officers, court personnel, or other government personnel to the CCIC at or (888) 884-8383.

(U) Click here if you would like to provide feedback/comments on this product.

(U) Civil Liberties: The Central Caiifornia intelligence Center (CCIC) is designed and encouraged to focus on sharing information collected in the ordinary course of business in connection with possible illicit and suspicious activity.
The CCIC refrains from investigating or reporting on First and Second Amendment activity unless sach activity is illicit, illegal or poses a threat to public safety. CCIC personnel that encounter or handle any United States person
information shall do so consistent with Executive Order 12333, 28 CFR 23 guidelines as well as the CA Attorney General Guidelines for intelligence. Any questions related to reporting information possibly implicating
constitutionally protected activities, such as free speech, right to own arms, or free exercise of religion, etc, will be reported to General Counsel for review. 

(U) This document contains sensitive information. it is intended for law enforcement use only. This Information, or the contents of this document, is prohibited from release to the media or general public. Further

dissemination of this document must be done on a need to know basis. Precautions should be taken to ensure this information is stored and/or destroyed in a manner that precludes unauthorized access. if you are not the
intended recipient you are hereby notified that any use, review, dissemination, or copying of this document is strictly prohibited.

ENFORCEMENT SENSITIVE

(888) 884?8383 0 Fax (916) 874?6180 

 

 

PARRISH 

 

 

i
i

I

1.
i

i

 

 

 ENFORCEMENT SENSITIVE

 

Special Event Threat Assessment-

03 July 2017

(U) 2017 California State Fair

Ir ?m?yb?nret 
esteem, I 

new

 

(U) Handling Note: This product was produced at the request Of the California Office of
Emergency Services and is intended far security planning. It is not intended for any further
dissemination.

(U) Assessment Date: 03 July 2017?

 

ENFORCEMENT SENSITIVE
(U) WARNING: This document contains sensitive information. it is intended for law enforcement use only. This information, or the contents of
this document, is prohibited from release to the media or general public. Further dissemination of this document must be done on a need to
know basis. Precautions should be taken to ensure this information is stored and/or destroyed in a manner that precludes unauthorized access.
if you are not the intended recipient you are hereby notified that any use, review, dissemination, or copying of this document is strictly prohibited.

(888) 884-8383 0 Fax (916) 874-6180 

PARRISH 

 

 

 

 LAW ENFORCEMENT SENSITIVE

 

The Central California Intelligence Center (CCIC)/Sacramento Regional Threat Assessment
Center (RTAC) has prepared the following Special Event Threat to assist security planners
and law enforcement personnel in monitoring threat information and maintaining a safe and secure
environment during the 2017 California State Fair. All involved organizations will be provided a copy of
this report for situational awareness. 

Data sources may include a review of: CCIC Suspicious Activity Reporting (SAR), the Federal
Bureau of Investigation (FBI) and the Department of Homeland Security (DHS) intelligence bulletins and
databases, local law enforcement reporting and data, and open sources to include social media, internet
websites, and news periodicals. The CCIC will continue using these sources to identify any threats to this
event up until the event date.

 

- issues related to alcohol abuse, crowd control, traffic, civil disobedience and access
control present the most likely public safety concerns.

0 The large number of law enforcement personnel focused on event security and
traffic congestion in the area leaves fewer security personnel available to respond to any
incidents' In the surrounding areas that may occur during the event, presenting additional public
safety concerns.

0 While there is a constant threat of violence to the Homeland and its assets by
terrorist groups, the CCIC does not possess any intelligence indicating that members of an
international or domestic terrorist group are targeting the 2017 California State Fair.

The CCIC does not possess any intelligence indicating a lone offender or homegrown
violent extremist is planning to. conduct an attack at the 2017 California State Fair.

0 The CCIC does not possess any intelligence which would indicate any direct criminal
threats to the event.

- A review of open sources, including social media, related to the 2017 California State
Fair did not surface any derogatory information.

 

1 A HVE is a person who advocates, is engaged in, or is preparing to engage in terrorist activity inspired by a foreign
terrorist organization (FTO) and who is U.S.-based, domestically radicaiized, and not collaborating directly with a FTO.

LA ENFORCEMENT SENSITIVE
(U) WARNING: This document contains sensitive information. it is intended for law enforcement use only. This information, or the contents
of this document, is prohibited from release to the media or general public. Further dissemination of this document must be done on a need to
know basis. if you are not the intended recipient you are hereby notified that any use, review, dissemination, or copying of this documentis strictly
prohibited

Page 2

PARRISH 

 

 

 

LAW ENFORCEMENT SENSITIVE



 

(U) Even . 7 7

(U) The California State Fair will be held from 14430 July 2017 at Cal Expo, located at 1600 Exposition
Boulevard in Sacramento, CA. The event is a celebration of the State of California, its industries,
agriculture, and the diversity of its people. In past years attendance has topped 750,000 attendees.

(U) The fair will feature a number of attractions, exhibits, carnival rides, showcases and races for dogs,-

horses, and livestock, along with various sporting events. Several music concerts will be held throughout
the course of the event.

(U) Television, radio, internet, and print media will provide media coverage ofthe event.

 
 

Although criminal street gang activity and associated violence can pose a threat to the 2017,
California State Fair, the CCIC has no information to indicate criminal street gangs are targeting the event.
Individual gang members may attend the event thus raising the possibility ofspontaneous confrontations
between rival gang members. Tensions between Nortefios and Sure?os affiliates present the greatest
potential for gang violence. 

 

Issues related to alcohol abuse, crowd control, traffic, civil disobedience and access control
present the most likely public safety concerns. Traffic conditions before and after the event are assessed
to pose a significant risk to public safety. The large volume of pedestrians at the event may impede the
flow of traffic, including fire and police department vehicles attempting to respond to calls for service.

Additionally, although the CCIC does not hate any information indicative of a call to action,
protests/counter?protestors ofthe event or itssponsors, a spontaneous mass gathering has the potential
to attract extremist elements that may encourage violence and createa hostile environment. CCIC
Comment: As a reminder, protest activity is protected by the First Amendment of the US. Constitution,
though such activity may be limited in very specific circumstances. These types of events are generally
peaceful, but on occasion, have the potential to present public safety concerns for law enforcement. The
safety of participants and spectators are the focus of this notice. Unlawful activity including harassment,
or obstructing othersin conducting their own lawful activities - is not protected.

Another threat security planners should be cognizant of is the use of vehicles being utilized for
the purpose of attack. One methodology involves vehicle borne improvised explosive device (VBIED)
attacks. Vehicles of any type or size can be utilized as a VBIED. Additionally, a vehicle used as a weapon
itself. There have been 13 vehicle ramming attacks in 2017. Vehicle ramming has increased over 200% in
the last decade, (see attached CCIC ramming product). Vehicle ramming attacks, such as the 14 July 2016,
Nice France attack where a lone driver deliberately drove a cargo truck into crowds celebrating Bastille
Day, killing 86, and injuring over 400, offer a simple, effective, and devastating means of inflicting mass

casualties In a relatively short amount of time. Additionally, on 19 June 2017, in Paris France, a car, .
reportedly driven by an sympathizer, was rammed into a police van, the vehicle burst into flames. -

Although the driver succumbed to wounds sustained during the attack the vehicle was carrying a number

LA ENFORCEMENT SENSITIVE
(U) WARNING: This document contains sensitive information. it is intended for i aw enforcement use only. This information, or the contents
of this document, is prohibited from release to the media or general public. Further dissemination of this document must be done on a need to
know basis. if you are not the intended recipient you are hereby notified that any use, review, dissemination, or copying of this document is strictly
prohibited. 

Page 3

PARRISH 

 

 

 

 LAW ENFORCEMENT SENSITIVE

of weapons and explosives. It is' likely the driver intended to carry out a secondary attack after the
ramming. Consideration should be taken for event traffic as Well as volunteers, vendors, delivery vehicles,
and other transportation methods which will have varied levels of access to the event. CCIC Comment:
The CCIC does not have intelligence suggesting a vehicle ramming attack is imminent or being planned
against the 201 7 California State Fair. Due to varied levels of unrestricted event access for vendors, vendor
vehicles, and drivers, a more in?depth security screening process could be utilized as a counter to possible
terrorist or criminal activity. Exposition Boulevard along the northern border of the Cal Expo event grounds
will see significant congestion prior to during and after the 201 7 California State Fair. Pedestrians are
known to park vehicles, and set up chairs along Exposition Boulevard. As such, consideration should be
given and steps taken to mitigate the possible threat posed by vehicles to this area. See appendixA and 
for further details

Additional ramming and VBIED countermeasure considerations:

These countermeasures have been provided by other California Law Enforcement agencies who
successfully implemented these countermeasures and who have significant experience with large venue

security. These security measures can be implemented to limit/negate a potential vehicle attack at a large
venue. 

- Water Barricades to block vehicle access to pedestrian areas
- Staggered Water Barricades to limit high speed avenues of approach
Public Works Vehicles (Garbage and Water Trucks) to block Vehicular access where barricades
were not feasible or accessible
0 Attendants with keys should stay near vehicles in support of emergency response
LE with rifles at strategic entrances located along high speed avenues as a visual deterrence
- K- 9 units for unattended packages and vehicles

Additional considerations for Unmanned Aerial Systems Drones

First responders may increasingly encounter UAS, a tech nologythat could be used by terrorists
to conduct surveillance, to harass, or even to deliver an explosive device. The rules governing proper

operation of this technology are not widely known. CCIC Comment: To date there have not been any 

successful terrorist attacks, in the U. 5., that utilized UAS technology. Outside of the U. S. the technology
has been repeatedly utilized to successfully attack the U. 5. and its allies. These attacks utilized hobby type
UAS to drop IEDs (Improvised Explosive Devices) inside secure areas where terrorist personnel could not
normally reach. Considerations when encountering UAS activity that may be indicative of nefarious use.

- Use of UAS during unusual hours or locations, such as near sensitive facilities, landmarks,
government buildings, critical infrastructure, or security checkpoints

Operating UAS over crowded areas or over persons not affiliated with the operator

- Modification of safety and warning lights

*Please see included UAS attachments: Rules Governing Operation of Unmanned Aircraft
Systems (UAS). Also, see Appendix C: the Basic Law Enforcement Response Card.

SENSITIVE
(U) WARNING: This document contains sensitive information. it' Is Intended for law enforcement use only. This information, or the contents
of this document, is prohibited from release to the media or general public. Further dissemination of this document must be done on a need to
know basis. if you are not the intended recipient you are hereby notified that any use, review, dissemination, or copying of this documentis strictly
prohibited

Page 4

PARRISH 

 

 

 LAW ENFORCEMENT SENSITIVE

fml?la?m?

 

 

The CCIC has no specific intelligence indicating international terrorist groups are targeting the
2017 California State Fair; however, the CCIC assesses the Islamic State of Iraq and Syria al?Qa?ida
(AQ), and associated affiliates remain intent on conducting terrorist attacks within the United States.

Although to date there have been no ISIS?directed attacks on the Homeland, over 2,050
people, in 143 attacks in 29 countries have been killed in attacks either inspired or coordinated by the -
group outside ?of Iraq and Syria. Nearly half ofthose victims were killed in attacks targeting Westerners.?

The 23 May 2017 Director of National Intelligence Worldwide Threat Assessment states that
continues to pose an active terrorist threat to the U.S. and its allies.? And ISIS maintains the intent
and capability to direct, enable, assist, and inspire transnational attacks.?ii

On 26 May 2017, ISIS published a special issue of Rumiyah, its propaganda magazine that called
for terror attacks during the month of Ramadan (26 May 24 June). Attacks were encouraged in the U.S.
Europe, Russia, Australia, Iraq, Syria, and the Philippines. To date, compared to Ramadan 2016, three
times as many fatalities have been attributed to international terrorism during the 2017 month of
Ramadan.iil

  

The CCIC has no specific intelligence indicative of a HVE threat tothe 2017 California State
Fair. HVEs are often self-radicalized, lack direct links to known extremist organizations, and can be one of
the most difficult actors to detect. The number of HVEs sympathetic to, or motivated by, radical Islamic
ideology continues to increase. According to the National Counterterrorism Center, there are
approximately 1,000 identified HVEs with a presence'in all 50 states.? AG and ISIS propaganda has
targeted HVEs over the past several years and continues to resonate with small elements of the U.S.
. population. 

HVEs tend to develop attack capabilities independently by using online forums, social media,
and downloading extremist publications like Dabiqf Rumiyah3, and aI?Qa?ida in the Arabian
Peninsula?s Inspire4 magazines. These publications are filled with anti?U.S. rhetoric and repeatedly
advocate attacks against U.S. military, law enforcement, and security personnel, and have suggested using
small arms, improvised explosive devices (IEDs), and vehicles to target mass gatherings. Security planners
should be cognizant of unattended packages and suspicious occupied or unoccupied vehicles, both within
the venue and the surrounding perimeter, as these may pose a significant threat to the event and its
patrons.

 

2 (U) Dabiq Is a online magazine produced by ISIS for propaganda and recruitment, published In several languages, Including English.
3 (U) Rumlyah is a periodical online magazine produced by ISIS for propaganda and recruitment, published In several languages. Including English.
4 (U) Inspire Is an English language online magazine published by AQAP In an effort to in?uence an American audience with their radical propaganda.

LAW ENFORCEMENT SENSITIVE
(U) WARNING: This document contains sensitive Information. it is intended for law enforcement use only. This Information, or the contents
of this document, is prohibited from release to the media or general public. Further dissemination of this documentmust be done on a need to
know basis. If you are not the intended recipient you are hereby notified thatany use, review, dissemination, or copying of this documentis strictly
prohibited.

Page 5

PARRISH 

 

 

 LAW ENFORCEMENT SENSITIVE

HVEs not yet identified by law enforcement or the intelligence community likely pose the
greatest terrorist threat to the 2017 California State Fair. HVEs are typically familiar with their local
community and have greater access to possible targets and materials to execute an attack. While the
unstable nature of HVE behavior often presents law enforcement challenges in determining HVE capability

and intent an analysis of previous HVE plots indicate the following military, civilian, and infrastructure
targets of interest: 

Government

 

 

 

7 7 _.Federal/locallaw

Venues W'th large crowds. RecruitmentiCenters . I renforcement 7
:malls,tourist areas and speCial facilities/personnel

7 events -

   
   
    

 

n'??r?ith'aIiticiaiI

 

 

Airports,rail,and Subway systems I V?Aircraft-r, -- Events

 

 

 

 

Recent incidents involving possible HVEactors:

0 (U) 6 January 2017, Esteban Santiago?RuizUSPER opened fire in the Fort Lauderdale?Hollywood
international Airport, killing five and injuring six. Ruiz bought a one way ticket from Alaska,
retrieved and loaded a pistol from his checked baggage, and shot the first peOpIe he encountered.
Although not able to be confirmed, Ruiz has claimed ties to ISIS.

- (U) 31 January 2017 a Muslim convert and follower of ISIS, Joshua A. CummingsUSPER killed a transit
guard in Denver Colorado. Cummings came to Denver from Pampa, Texas where he ran a Jiu-Jitsu
Academy. He left Texas after attempting to convert friends and family to Islam.

 

The CCIC has no specific intelligence indicating any domestic terrorist groups are targeting the,

2017 California State Fair. Domestic terrorists are typically motivated by racial, ethnic, anti-government,

or socio-economic issues. Several domestic terrorist groups have an operational presence in the Eastern

District of California (EDCA) including sovereign citizen extremists, militia extremists, environmental
7 extremists, and animal rights extremists, as well as anarchists and hate groups.

The FBI determined threat levels for extremist movements based on an assessment of the
actual or potential damage resulting from: ideologically-driven criminal incidents; credible, but disrupted
plots,- and threat intelligence reports suggestive of aspirational attacks.?

According to an FBI 2016 National Threat Report, domestic extremism presented an overall
medium level threat to the United States in 2015 and likely will remain at a medium level through 2016
and into 2017"? As ofJune 2017, assessment remains unchanged.

LAW ENFORCEMENT SENSITIVE
(U) WARNING: This document contains sensitive Information. it is intended for law enforcement use only. This information, or the contents
of this document, is prothitea' from release to the media or general public Further dissemination of this document must be done on a need to

know basis. if you are not the intended recipient you are hereby notified that any use, review, dissemination, or copying of this document' Is strictly
prohibited.

Page 6

PARRISH 

 

 

LAW ENFORCEMENT SENSITIVE

 

The CCIC has no specific intelligence indicating alone offender is targeting the 2017 California
State Fair. Individuals who fall under this threat category have figured prominently as instigators of
terrorist attacks in recent years and may pose a significant threat of violence due to their unpredictable 

nature and ability to plan operations outside of law enforcement detection and execute successful


The FBI continues to assess lone offenders and small cells as the greatest threat of
ideologically driven violence. This assessment remains unchanged from earlier analysis but could change,
particularly if domestic extremist sentiment or actions resulted in greater collaboration amongst
extremists or extremist groups. 

Possible Lone Offender Activity Indicators 

 

 

(U) Obtaining or vaicing interest in obtaInIng/usmg weapons, exploswes, and bomb? manuals for use in
"VIolent actions . . - .7 . ., -

    

 

 

 

Rejection by or vo IIntary departure from a group for advocating VIolence that the group does not support

. (U) Expressmg solldarIty with or admIratIon for other lone offenders

 

 

 

A review of cous rtI(Ri ah FBI-"threat data returned no
information relevant to the upcoming celebration. Below' Is a summary of significant reports from the Cal
Expo area over the past 12 months.

   

- Multiple reports of law enforcement and fire personnel uniforms and equipment stolen since
January 2017. CCIC Comment: This could allow subjects unrestricted access to secure areas of the 2017
California State Fair. To counter this threat photo ID badges are encouraged for all event personnel,
including uniformed personnel. 

10 reports of Expressed or Implied Threats toward law enforcement officers in Cal Expo and
the surrounding areas in the last year. CCIC Comment: There are no indications that LE personnel are
being targeted at the 2017 California State Fair. 

 

LAWENFORCEMENT SENSITIVE
(U) WARNING: This document contains sensitive Information It is intended for law enforcement use only. This information, or the contents
of this document is prohibited from release to the media or general public. Further dissemination of this document must be done on a need to

know basis if you are not the intended recipient you are hereby notified that any use, review, dissemination, or copying of this documentis strictly
prohibited.

Page 7

PARRISH 

 

 

 LAW ENFORCEMENT SENSITIVE

 

The following are identified intelligence gaps relative to the 2017 California State Fair.

0 What groups or individuals, if any, are planning to target this event and have not been
. identified by Law Enforcement?

- What political figures or celebrities, if any, are planning to attend this event that may
be targeted by a group or individual?

 

(U) Please forward any reports concerning suspicious activity orthreats that coincide with the 2017
California State Fair to the following Cal Expo Police contact:

(U) Eric Broughton
916-531?5984


(U) Please forward any other to the CCIC via the website at or by calling the
CCIC duty line at (916) 808-8383.

LAW ENFORCEMENT SENSITIVE
(U) WARNING: This document contains sensitive information. it is intended for law enforcement use only. This, information, or the contents
of this document, is prohibited from release to the media or general public. Further dissemination of this document must be done on a need to

know basis. if you are not the intended recipient you are hereby noti?ed that any use, review, dissemination, or copying of this document is strictly
prohibited. 

Page 8

PARRISH 

 

 

 LAW ENFORCEMENT SENSITIVE

 

 

?tnimuni Stunting (it)

an?

 

It) 199 LQQD . 
Weapon Yieid .

WW {Stats 0? Minor Cuts Threshotd iniuties #0913921 or BuEIdings

Gian Severe Wounds ?m Foienifaiiy. lethai lniusies

(Sines with Fragment Relegation Threeh?id, Commie Celumns F?ii
F?irn Severe Wounds

 



 

Wail Fragment infuries or injuries "to
Pers-onnei in Cinna-

 

 

 

LA ENFORCEMENT SENSITIVE
(U) WARNING: This document contains sensitive Information. it is intended for law enforcement use only. This information, or the contents
of this document, is prohibited from release to the media or general public. Further dissemination of this document must be done on a need to
know basis. if you are not the intended recipient you are hereby noti?ed that any use, review, dissemination,?or copying of this documentis strictly
prohibited. - 

Page I9

PARRISH 

 

or. .. ..

 

 

LAW ENFORCEMENT SENSITIVE

 

 

{imam 03$ Nth?
Wit teem: REWE



 

Wmeat iikety to 53mm {tea at Vehtcie-Remming tactics

toemam SSEL-tmpired and other ione?etteader viaient extremists in the west petaticty cat: for vehteutae attacks in the wake of the sane Z?i?ettack in Nice,
graham wt? increase their use of vehtote?miag attacks because ?ance, waging from a review at {await-at propagan?a. tiehicie?{atm?ng Matias
such operations require mieimat trauma-expertise tacmcee, or probabty arewtnerebie to the meet vetu?cie hernias in some targetareas,
weepera?ionai aiming. ?u?iotem?extrmist pmpageada has advocated aehicfe? amt feet?responder agencies mid twitter timti? reiated casuai?es am}
ramming attacks since {moire magazine discussed the tactic to Mega by tattored-resgonse aims. anti nominating training to
2030, and we assess that tS?. and other terrorist groups wilt continue to prepare for such imi?enta 

AW, amt ?tting Edam-Extremist ?essaging

 

eater eete


 

 

2&3 Emit?

Vehtcieaamming Eminent:

 

 

wettest Feaettam cmee on some a? ?gtotsat ?tted.? was: ?that: of mi seaweed}!
new WJWS-E 653.31%
EWWEER 233m
eateesea 3? 
he Smears
hm? Nit W303- WWE
New aim?

 

 

 

 

SENSITIVE
(U) WARNING: This document contains sensitive information. It is intended for law enforcement use oniy. This information, or the contents
of this document, is prohibited from release to the media or general public. Further dissemination of this document must be done on a need to

n, or copying of this document is strictiy

w, disseminatio

revie

know basistended recipient you are hereby noti?ed that any use,

prohibited.

Page 10

PARRISH PRA 000349

 

 

 

UNCLASSIFIEDH LAW ENFORCEMENT SENSITIVE

 

 

MR seem SSE ?3953!?

     
     

 

CC: Rammzag'A I . 'ks Ian I Current'as wastes-2017*
in that est decade, of vehicies for the purpose of or musing innocent bys?nders has increased aimast 206%.
E?etpetretors the United States and sawed are venicies asst: inexpensive means to an end, Aciditionaiiy, is: a third of Ali
vehicie attacks a secondary weapon was assets to in?ict foodies harm once theryehicie had been disebiedNorth Car?oiine at Cbapei 9; SW VES 930 I
senses cast .2 yes {asses} unknown: sis
2915 Las Vegas saga one so yes says
33:23:: msAnsAesVen aseach :3:sg..3.
2ozs 5 one: State assesses: I, .. CAR IyesncsisEAWACKAI PER WAR .I assists ?was seaasanay weaves:

          

 

 

  
 

as was :Aainmiyg-Astaaks 
I since sass, disses? assesses??- .
.sinaem?i?

DisuakfRea' nah i - Knife . It .k I .k issue 
mew 612%. higbiights vehicies a; the 
. Car as Ema?! Vehscie - . ut?mate ?Mowing Machine?

Analytic Comment: 323? the 35 vehtcie ramming oases recorded globaiig since imif occurred in the past three: years. Vehicles afar a: simple,
reiativeiy covert; emf devastating oftemotive to freamss, especially in an envinonment where an openly carried?rearm wil! Iikefy draw on wanted
astten?on ?Nate: Vehicle Romming as a terrorist tactic was first encbumged in AieQaida?s inspire magazine. in 231:}. and than reiterated and praised by
iSit?s mm 291:: after the Canadian incident. . 

(U) WARNING: II'I'his docunmrt contains sensitive intonation. This information ,Iortn'e contents of this becomes; some media atganesai aabiic. Further dissamnation. of mstdomment

must be done an a need Ito knew basis. if you are not the intended recipient you'are hereby noti?ed?ttpat senior.

I I dissemmation as copyingofthis document? IS prohibited;
max HERE to Repose Suspio?aasmaty swam: i

It 

 

USE GNW

 

 

LAW ENFORCEMENT SENSITIVE
(U) WARNING: This document contains sensitive information. it is intended for law enforcement use oniy. This information, or the contents

of this document, is prohibited from reieose to the media or general public. Further dissemination of this document must be done on a need to

review, dissemination, or copying of this document is strictiy

know basis. if you are not the intended recipient you are hereby notified that any use,

prohibited.

Pagel 11

PARRISH PRA 000350

 LAW ENFORCEMENT SENSITIVE

 

a? to,

of),
- to

Direct attention outward and upward. attempt to locate and identify individuals operating
the drone. (Look at wiedowe/belconiee/rooi tone).

   
   

     

Report incident to the FAA Regional Operations Center (ROG). Foliow?up assistance can be
obtained through FAA Law Enforcement Assistance Program special agents.

Observe the UAS and maintain vieibitity of the device, look for damage or injured individuals.
Note: Battery life to typically 20 to 30 minutes.

Notice featuresi identify the type of device its size. shape. color.
payload video equipment), and activity of device.

Execute appropriate police action: Maintain a safe environment for general public and first
responders. Conduct a field interview and document ALL details of the event not the
guidance provided by the FAA. 

Always follow agency policies - Take appropriate action based on the facts and circumstances of the incident and site/area- 
specific laws and rates. The enforcement action does NOT impact ANY enforcement action/s taken bylaw enforcement.

Local ordinances that may apply include, but are not limited to: Reckless endangerment criminal mischief. voyeurism, .
inciting violence.

 

FAA Drone Incident Reporting

 

provide the following information to FAA:
. Identity of operators and witnesses (name, contact information)
a Type of operation (hobby. commercial, oublicigovernmental)
. Type of device(s) and registration information. (number/certificate)
. Event" location and incident details (date, time. place)
a Evidence collection (photoe, video, device confieoetion)

   

FAAFEAPEQEM or an FAA operations center for assistance. I

 

 

 

PHGNE NUMBER EMAIL
Western ROC AK4254274 999 
Central ROC AR. IA, IL. IN. KS. LA. Mi. MN. MO. ND. NE. 8174226006 
OK. 50, TX and WI 
AL, CT, FL, GA, KY, MA, ME, MS. NC. NH, PR, Rt, SC. 404~305~5180 
TN, VI and VT . .
East RGC DC40443056150 

LAW ENFORCEMENT SENSITIVE .
(U) WARNING: This document contains sensitive information. it is Intended for law enforcement use only. This information, or the contents
of this document, is prohibited from release to the media or general public. Further dissemination of this document must be done on a need to

know basis. if you are the in tended recipient you are hereby notified that on use, re view, dissemination, or copying of this document is strictiy
prohibited.

Page 12

PARRISH 

 

 

 LAW ENFORCEMENT SENSITIVE

(U) Tracked by: HSEC-8.1, HSEC-8.5, HSEC-8.6
(U) Feedback
(U) Click HERE if you would like to provide feedback on this product.

(U) Endnotes

 

i (U) 

ii 



iv National Counterterrorism Center Terrorist Fact Sheet; April 2016; ?Homegrown Violent Extremists?
(U) JRIC Intelligence Assessment; 25 August 2011; ?Decade in Review: Targeting by Homegrown Violent Extremists
Primarily Focused on Military, Civilian Targets Rising"

vi (U) 2014: National Intelligence Study: Domestic Extremism Continues to Pose a Medium-Level Threat.

vii (U) 2015 National Threat Report: Domestic Extremism Poses Medium- Level Threat.

vlii FBI Intelligence Bulletin; 5 August 2012 "Lone Offender Targets Sikh Temple?

ix (U) 2014: National Intelligence Study: Domestic Extremism Continues to Pose a Medium-Level Threat.
FBI intelligence Bulletin; 5 August 2012 ?Lone Offender Targets Sikh Temple?

XI TL20160582

LA ENFORCEMENT SENSITIVE
(U) WARNING: This document contains sensitive information. it is in tended for law enforcement use only. This information, or the contents
of this document, is prohibited from release to the media or general public. Further dissemination of this document must be done on a need to
know basistended recipient you are hereby notified that any use, review, dissemination, or copying of this document Is strictly
prohibited.

Page I 13

PARRISH