reSee.it - Related Video Feed

I found Brian in the server logs, showing him the database. Christy Francois let him in, which could be a problem later on.

At some point, there is a correlation between the purging of the database and the date of the audit. They both happen almost at the same time, the day before the audit. This connection requires an explanation.

Christy has access to the server room, and we need to send her name there. The server logs reveal Brian's involvement, and there's a significant database that I expected to find. Brian is a valuable team member despite any criticism. We see Christy interacting with the logs and deleting entries. She is granting Brian access to the server, and I’m monitoring the console. At this point, Christy is not in the room, but she is coordinating with others. This situation raises concerns as multiple people are nearby, indicating potential issues.

Speaker 1 describes a man on the team who, after he was shot, runs toward the vehicles, stays outside the vehicles, and films a TikTok selfie video. They ask to identify this person, and it is confirmed to be the audio-visual (AV) team member who runs the cameras. This individual is said to have said, “Charlie just got shot,” and is the same person associated with the footage and the AV setup contracted to shoot the coverage. Speaker 0 clarifies that this person works for a company called VI, which provides contract AV/video personnel, and is not a security guy. He is the AV team member who runs the cameras. He also is described as the person who “took down the cameras” and there were questions about what happened to the footage, noting that this is a legitimate inquiry. Speaker 1 adds that after the event, someone goes to the camera behind Charlie, pulls the camera down, and it looks like they pull the SD card out; this footage is in the hands of the FBI and was not deleted or erased. The SD card was pulled by someone named Senga, and the footage ended up with the FBI. Speaker 0 reiterates that the AV person works for VI, the video contracting company, not as security. He expresses confusion about the phone usage and states that it’s not for him to understand that part; he observes that, in tragic events, people pull their phones out instead of running, and says that’s for the AV person to explain. He notes that the AV person does not work for them, but from what he has seen, this is the same person who took down the cameras, prompting legitimate questions about where that footage went. He confirms that the person was interviewed by the FBI, asked questions, and that all relevant material was turned over.

On February 11th, a script overwrote 462 log entries. On March 3rd, the same script overwrote 37,686 log entries. On March 12th, the day before the system was received, 330 log entries were overwritten by the script. The EMS admin account performed these actions. A log file from the Dominion software for results tallying and reporting shows that someone purged all the results for the election. The action completed successfully, deleting all the files on the NAS directory, including results and images from the election. According to the transcript, an individual ran a program to clear all records in the system used to generate the official results the day before an audit started.

I found a video where the speaker goes through some server logs and discovers a database issue. They mention finding different forensics related to it. They also mention a person named Christy, who seems to be active in the GMC community.

The speaker discusses the issue of Windows security logs being purged right before two audits were set to begin. They highlight the difficulty in determining who had access to the RTR admin account, which is shared among all accounts. The speaker questions why someone would delete all the results and records from the Dominion software, which is used for tallying and reporting election results, just before an audit. They mention that the deletion was successful and affected files on the NAS directory where election images and details were stored. Overall, the speaker emphasizes the lack of accountability and the need to understand the motives behind this action.

On 2/11, 462 log entries were overwritten by a script. On 3rd March, 37,686 log entries were overwritten by the same script. The day before we received the system, 330 log entries were overwritten by that script. The EMS admin account was responsible for this. The challenge is that this occurred before an audit, and it deleted all the records and files related to the election. Someone deliberately ran a program to clear all the records in the system used for generating the official results.

Speaker 0 introduced the topic of cell phone tracking and forensic geofencing data, noting that the same tracking methods used in January 6 were capable of determining whether someone went onto the steps or onto the lawn, and where they were exactly. The question was what findings exist regarding this data in the current case. Speaker 1 answered that the investigation will reveal with great clarity whether Tyler Robinson was in the Orem area, whether the text messages involving many questions were sent from Orem to Lance Twigg, and whether Lance Twigg was in Southern Utah or also in Orem. The main point is addressing how he could have known certain details based on terrain, given that he was not a student at the school. It is stated that it would be unlikely to have planned a murder from Google Maps, and that the authorities will determine this from the cell phone pathway—whether he went the day before or weeks before, and tracking all of that. Speaker 1 relayed information from forensic expert Joseph Scott Morgan, who claimed they would be able to track Tyler Robinson from 8 Hundredth Street through a tunnel, around the Losey Building, up the stairs to the roof, from the roof to the roofline, take the shot, jump off the Losey Building, and run into the woods. The speaker also mentioned conspiracy videos suggesting he was seen on a café security system; although the footage is limited, it exists, and some claim the FBI tracked him to that location. The next morning, at 7:15 AM, at a Cedar City Maverick gas station, it is claimed he swiped a credit card, and the phone was followed to his home, to visits with Lance, and to his parents. All calls, texts, and other phone activity are said to be known. Speaker 1 summarized that the forensic expert states that next to the gun, the cell phone data will be the element that ties Tyler Robinson directly to the person on the building, and that geotracking will reveal where his phone was at all times on that day. The response also notes skepticism about trust in the FBI, but emphasizes that geotracking will demonstrate the phone’s location during the day in question.

On various dates, an individual ran a script to find blank passwords for the accounts on the system. The script was executed multiple times, overwriting a significant number of log entries. The EMS admin account was responsible for this, but due to the lack of accountability in assigning the username, it is difficult to prove who exactly did it. Fortunately, historical data from MTech video feeds helped identify the individuals at the keyboards during those times. However, their names will not be released to protect them from scrutiny and potential impacts.

Christy accesses the server room and introduces Brian, a new forensics expert. She shows him the server logs and points out the deletion of certain logs. They discuss the importance of investigating further and mention the presence of other individuals. The video ends with a mention of someone named Matt.

The speaker reviewed server logs and identified "Brian." The speaker found a database in the next vendor and new forensics. Christy is mentioned in connection to a server. The speaker shows access and a deletion on the log from the database. A previous tweet shows Christy letting Brian into the server. The speaker repeats "Here he is" multiple times. The speaker mentions another law proposal and altering.

Speaker 0 explains that, on Spotify or Apple, the situation is that he’s in his room with no bullets in it, but he’s practicing firing a weapon. He notes that there are multiple videos like this in the person’s online history, which the speaker possesses. The speaker reiterates that the online history shows similar content, ending with the fragment “His online history shows,” indicating there is more content that is not provided in the transcript.

The speakers discuss the breadth and invasiveness of data that can be accessed from a person’s phone, highlighting how such information can be retrieved and used in investigations. They enumerate the various types of data that can be obtained: call logs, chats, cookies, device notifications, emails, instant messages, and passwords. They note that deleted conversations on encrypted apps like WhatsApp and Signal can also be accessible, as well as Millie’s deleted web browsing history. The speakers emphasize that contact information for everyone the person has spoken to, and the locations of all their calls, can be seen. They point out that information about other people’s phone numbers can be accessed, and they ask whether those people’s messages to the person can be seen, with the answer being yes. The police can obtain information about people the person has contacted, not only in relation to any arrest that might have occurred but also concerning individuals who may have contacted the person securely (for example, through Signal) about work. The speakers express that the most worrying aspect is that this kind of data access can happen at the time of arrest, even when charges are never brought, and that it can also apply to witnesses and victims. They argue that there appears to be little clarity about deletion, implying that the police can effectively do what they want when they obtain someone’s phone, which they describe as a scary amount of information. Despite the fear, they also acknowledge that this data is extremely useful for the police in investigations. A central concern raised is the current lack of a required warrant to obtain any of this information. They argue that there should be a degree of checks and balances to determine whether it is proportionate to access such data in a given case, stating that in some cases it may not be necessary to access a person’s phone. Overall, the discussion highlights a tension between the usefulness of comprehensive digital data for investigative purposes and the potential for overreach or abuse in the absence of warrants or robust safeguards.

The speaker reviewed server logs and identified "Brian." The speaker found forensics in a database. The speaker shows access and a deletion on the log from the database. The speaker claims Christy previously tweeted about letting Brian into the server. The speaker repeats "Here he is" multiple times. The speaker mentions a law proposal.

In this video, Brian Erch demonstrates the Rapid Information Overlay Technology (RIOT) cyber tracking system. He integrates social networking websites like Facebook, Twitter, Goala, and Foursquare to track an employee named Nick Kneese. Using the RIOT Object Browser, Brian searches for Nick's information and finds his check-in locations on a KML file. He also retrieves pictures taken by Nick and locates them on Google Earth. Brian then predicts Nick's future whereabouts by analyzing his top check-in places. The video concludes with a demonstration of the graphical RIOT Object Browser, which visualizes the relationships between objects and provides additional information about Nick's interactions on Twitter and linked phone numbers.

The discussion centers on forensic cell phone tracking and geofencing data, the same methods that were used to track individuals in January 6 cases, including whether someone went onto the steps, onto the lawn, or exactly where they were. The speakers indicate that investigators can determine an individual’s precise movements and locations through cell phone data. The key point is that in this case, it will become clear whether Tyler Robinson was in the Orem area, and whether the text messages that have raised questions—whether those messages were sent from Orem to Lance Twigg—place Lance Twigg in Southern Utah or also in Orem. The main outcome anticipated is clarity about Robinson’s location, but importantly, the discussion emphasizes the ability to reconstruct movements and associations from cell phone data. The speakers note that people are asking how Robinson could have known about certain details based on terrain, given that he was not a student at the school, and they argue that Google Maps alone would not explain this. They assert that the path of his cell phone—whether he went the day before or weeks before—will be accessible, allowing investigators to track his movements comprehensively. A forensic expert, Joseph Scott Morgan, is cited as saying they would be able to trace his movement from 8 Hundredth Street, down through a tunnel, around the Losey Building, up the stairs, onto the roof, from the roof out to the roofline, where the shot was taken, and then to him running into the woods. The conversation also references conspiracy videos claiming to see him on a cafe’s security system—claiming his car is visible—arguing that this is not necessarily inconsistent with a murderer’s behavior, since a killer could be in a car while amped up on adrenaline. The speakers explain that the cafe owner could only review such surveillance if the FBI tracked him to that location; they discuss how geolocation and surveillance data would be used to corroborate movements, including how, the next morning at 7:15 AM, at a Cedar City Maverick gas station, he swipes a credit card and the authorities follow his phone, tracking when he goes home, whether he visits Lance, and when he visits his parents, with a full trail of calls, texts, and movements. The forensic expert, Joseph Scott Morgan, emphasizes that aside from the gun, the cell phone data will be the key element tying Tyler Robinson directly to the person on the building, and that geotracking will reveal where his phone was at all times on that day, addressing doubts about the FBI’s methods and reliability.

Stephen Gardner and Jack Buzovic argue that the smoking gun will be the geolocation data next to the DNA evidence on the rifle. They say, essentially, you steal my car and commit a crime, you’ll likely find my DNA in the vehicle and on the trigger, so now we’re going to trust some expert to provide magical geolocation data. They question how Tyler Robinson could be involved and suggest this should be a single, big government conspiracy if he didn’t actually take the shot. They insist CCTV video would show Tyler Robinson moving through the parking garage, onto the roof, and through various locations, and that the investigation should not avoid showing the video. They ask how a juror would be convinced without video footage when there are twenty different videos, and whether geolocation data could hurt the case when a murder has been committed. They complain about having to trust another expert and mention past high-profile investigations. They demand to see CCTV video showing Tyler Robinson walking across the campus, onto the roof, getting into his car, running through neighborhoods, because all that has been presented is “slop.” Ryan Mehta introduces this segment as a critique of the presented evidence. Speaker 1 (questioning the forensic approach) asks about cell phone tracking and geofencing data, noting that the same method was used in January 6 to determine who was on the steps or on the lawn. They ask what was found regarding that data in this case. Speaker 2 responds that the case will reveal with great clarity whether Tyler Robinson was in the Orem area and whether the texts that many have questions about were sent from Orem to Lance Twigg, and whether Lance Twigg was in Southern Utah or in Orem. The main point is that people are asking how he could have known given the terrain and that Google Maps could not have allowed planning of the murder. They say the data will show paths, including whether he went the day before or weeks before, and will track all of that. Joseph Scott Morgan told them they would be able to track him from 8 Hundredth Street down through the tunnel, up around the Losey Building, up the stairs, onto the roof, from the roof out to the roofline, take the shot, jump off the Losey Building, run into the woods. They mention conspiracy videos claiming he was spotted at a cafe on security footage; some claimed the cafe owner saw him on security cameras, while others claimed it wasn’t consistent with a murderer’s behavior. They argue the FBI tracked him to that location, and that the next morning at 07:15 AM, a Cedar City Maverick gas station records his credit card use and follows his phone, his movements home, visits to Lance, and visits to his parents, with all phone calls, texts, and other data available. The forensic expert, Joseph Scott Morgan, asserts that next to the gun, the cell phone data will be the thing that ties Tyler Robinson directly to the person on that building, and there is doubt among some about trusting the FBI. The discussion ends with the assertion that geotracking will provide the crucial link.

The speaker mentions server logs and their own logs, and then reveals that someone named Christie is involved. They state that Christie is not the right driver for the medical situation and imply that it is being discussed online.

On 2/11, 462 log entries were overwritten by a script. On 3rd March, 37,686 log entries were overwritten by the same script. On 12th, 330 log entries were overwritten. The EMS admin account is responsible for this. The challenge is that this occurred before an audit, which means the full context of the election is not available. The log file shows that someone purged all the results for the election, deleting all records and files. This happened right before the audit started.

On the left is the image before the Dominion employee arrived at the election management server, and on the right is the image after the employee left. The logs folder on the left is missing on the right, indicating that it disappeared after the employee left. Additionally, in the Inetpub log folder, there are multiple log files that contain evidence of connections to the web server. The number of log files is not mentioned.

On various dates, an individual ran a script to search for blank passwords on the system. This script overwrote a significant number of log entries. The EMS admin account was responsible, but it's difficult to prove who specifically executed the script due to the lack of accountability in assigning usernames. Fortunately, historical data from MTech video feeds allowed us to identify individuals at the keyboards during those times. However, we won't disclose their names due to the potential scrutiny and impact on them.

There is a discussion about log files on two screens. One screen shows hundreds of log files from 2019 until May 22, 2021. The other screen only has three years of log files, which have mysteriously disappeared. It is mentioned that when a Dominion employee came in, the log files vanished. These files record all access to a specific machine. It is also mentioned that Dominion sent people around the country for software updates during that time. Some participants confirm this information.

In this video, the speaker talks about checking the server logs and finding something interesting. They discovered a database in their extended logs, which they believe is related to forensics. They mention someone named Christy, who is an active member of the GMC community.

On February 11th, a script overwrote 462 log entries. On March 3rd, the same script overwrote 37,686 log entries. On March 12th, the day before the system was received, 330 log entries were overwritten by the script. The EMS admin account performed these actions. A log file from the Dominion software for results tallying and reporting shows that someone purged all the results for the election. The action was completed successfully, deleting all the files on the NAS directory, which contained all the results and images from the election. An individual ran a program to clear all records in the system used to generate the official results the day before an audit started.