From - Sat May 21 19:23:41 2011 X-Mozilla-Status: 0001 X-Mozilla-Status2: 00000000 Delivered-To: khijazi@unveillance.com Received: by 10.223.97.73 with SMTP id k9cs150764fan; Mon, 21 Mar 2011 23:24:18 -0700 (PDT) Received: by 10.90.62.39 with SMTP id k39mr4750079aga.52.1300775057187; Mon, 21 Mar 2011 23:24:17 -0700 (PDT) Return-Path: Received: from mail-yx0-f173.google.com (mail-yx0-f173.google.com [209.85.213.173]) by mx.google.com with ESMTPS id d1si7333837and.206.2011.03.21.23.24.15 (version=TLSv1/SSLv3 cipher=OTHER); Mon, 21 Mar 2011 23:24:16 -0700 (PDT) Received-SPF: neutral (google.com: 209.85.213.173 is neither permitted nor denied by best guess record for domain of jtubbs@unveillance.com) client-ip=209.85.213.173; Authentication-Results: mx.google.com; spf=neutral (google.com: 209.85.213.173 is neither permitted nor denied by best guess record for domain of jtubbs@unveillance.com) smtp.mail=jtubbs@unveillance.com Received: by yxk8 with SMTP id 8so3344718yxk.4 for ; Mon, 21 Mar 2011 23:24:15 -0700 (PDT) Received: by 10.236.175.69 with SMTP id y45mr5603556yhl.86.1300775055328; Mon, 21 Mar 2011 23:24:15 -0700 (PDT) Return-Path: Received: from [192.168.1.75] (99-1-188-105.lightspeed.tukrga.sbcglobal.net [99.1.188.105]) by mx.google.com with ESMTPS id h41sm2761849yhm.66.2011.03.21.23.24.13 (version=TLSv1/SSLv3 cipher=OTHER); Mon, 21 Mar 2011 23:24:14 -0700 (PDT) From: "J. Tubbs" Content-Type: multipart/alternative; boundary=Apple-Mail-7-345305270 Subject: LLoD JSON feed syntax issue Date: Tue, 22 Mar 2011 02:24:12 -0400 Message-Id: <54BB7F1B-C84C-4A2E-BA7A-B9FB0D5808A1@unveillance.com> Cc: Christopher Kruegel , Karim Hijazi To: Clemens Kolbitsch Mime-Version: 1.0 (Apple Message framework v1084) X-Mailer: Apple Mail (2.1084) --Apple-Mail-7-345305270 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=us-ascii Hey guys, Hope this note finds you well. I just noticed that the LLoD JSON feed has had improper syntax since = Feb. 17. There is a missing comma before the type key following the url = key/value. Example (all entriy blocks are the same as the following): {=20 "key" : "09061.havwk.info", "class" : "command&control.Heuristics", "url" : = "http://anubis.iseclab.org/?action=3Dresult&task_id=3D1a67cee230a8e9864d17= 9197492ce924c" "type" : "new", "ip-mappings" : [ "element" : "124.228.136.15", "element" : "124.232.147.168", "element" : "124.232.138.56" ] } J. Tubbs CTO Unveillance, LLC O. (404) 482-3557 www.unveillance.com jtubbs@unveillance.com ******************************************** CONFIDENTIAL & PRIVILEGED COMMUNICATION This message is for the named person's use only. The information contained in this communication is confidential and/or privileged, proprietary information that is transmitted solely for the purpose of the intended recipient(s). No confidentiality or privilege is waived or lost by any mistransmission. If you receive this message in error, please immediately delete it and all copies of it from your system, destroy any hard copies of it and notify the sender. You must not, directly or indirectly, use, disclose, distribute, print, or copy any part of this message if you are not the intended recipient. The sender or any of its subsidiaries each reserve the right to monitor all e-mail communications through its networks. ******************************************** --Apple-Mail-7-345305270 Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=us-ascii Hey = guys,
Hope this note finds you well.

I just = noticed that the LLoD JSON feed has had improper syntax since Feb. = 17.

There is a missing comma before the type = key following the url key/value.

Example (all = entriy blocks are the same as the = following):
{ 
  "key" : "09061.havwk.info",
 &n= bsp;"class" : = "command&control.Heuristics",
  "ip-mappings" : [
   =  "element" : "124.228.136.15",
   =  "element" : "124.232.147.168",
   =  "element" : = "124.232.138.56"
  ]
}

<= div>
J. = Tubbs
CTO
Unveillance, LLC
O. (404) 482-3557
www.unveillance.com
jtubbs@unveillance.com

********************************************
CONFIDENTIAL = & PRIVILEGED COMMUNICATION This message is for the named
person's = use only. The information contained in this communication = is
confidential and/or privileged, proprietary information that = is
transmitted solely for the purpose of the intended recipient(s). = No
confidentiality or privilege is waived or lost by any = mistransmission.
If you receive this message in error, please = immediately delete it and
all copies of it from your system, destroy = any hard copies of it and
notify the sender. You must not, directly = or indirectly, use, disclose,
distribute, print, or copy any part of = this message if you are not the
intended recipient. The sender or any = of its subsidiaries each reserve
the right to monitor all e-mail = communications through its = networks.
********************************************

= --Apple-Mail-7-345305270-- From - Sat May 21 19:23:41 2011 X-Mozilla-Status: 0001 X-Mozilla-Status2: 00000000 Return-Path: Received: from [192.168.1.102] (c-98-199-221-118.hsd1.tx.comcast.net [98.199.221.118]) by mx.google.com with ESMTPS id x32sm8185961ana.12.2011.03.21.19.05.28 (version=SSLv3 cipher=OTHER); Mon, 21 Mar 2011 19:05:29 -0700 (PDT) Message-ID: <4D8803E6.2010800@unveillance.com> Disposition-Notification-To: Karim Hijazi Unveillance Email Date: Mon, 21 Mar 2011 21:05:26 -0500 From: Karim Hijazi Unveillance Email Reply-To: khijazi@unveillance.com Organization: Unveillance User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.0; en-US; rv:1.9.2.15) Gecko/20110303 Lightning/1.0b2 Thunderbird/3.1.9 MIME-Version: 1.0 To: Meaghan Molloy , Matt Thompson Subject: Fwd: Fwd: Re: Reporter X-Enigmail-Version: 1.1.1 Content-Type: text/plain; charset=windows-1252 Content-Transfer-Encoding: 8bit -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Fuzz & Meg, This is an interesting thread between myself, Jerry Tubbs (Unveillance CTO), John Pescatore (Gartner Security Deity) and Mike Zboray (Gartner CSO). We identified a Mariposa infection within their network and graciously contributed the intelligence to them for further discovery. Looks like we are moving toward an Accenture like relationship with them. Thought you would like this as it is a massive testament to our capabilities. - -------- Original Message -------- Subject: Re: Reporter Date: Mon, 21 Mar 2011 13:55:42 -0400 From: J. Tubbs To: Zboray,Michael CC: Karim Hijazi Mr. Zboray, First of all it's an honor to meet you, even if virtually. Per your request, the destination sinkhole environment for this specific issue is: 67.210.170.0/24 For the timestamps, I am going to issue you an invite to view Gartner's network as we have it mapped into our Intelligence Platform. There will be a follow-up email to this one from praetorian@unveillance.com with further information on finalizing your registration and access privileges. Upon logging in your will be presented with a Dashboard where, if I recall correctly, there are two active issues -- one being the Mariposa infection. Clicking on the IP Address will take you to an asset summary view detailing the timestamps in UTC that you requested. J. Tubbs CTO Unveillance, LLC O. (404) 482-3557 www.unveillance.com _jtubbs@unveillance.com _ ******************************************** CONFIDENTIAL & PRIVILEGED COMMUNICATION This message is for the named person's use only. The information contained in this communication is confidential and/or privileged, proprietary information that is transmitted solely for the purpose of the intended recipient(s). No confidentiality or privilege is waived or lost by any mistransmission. If you receive this message in error, please immediately delete it and all copies of it from your system, destroy any hard copies of it and notify the sender. You must not, directly or indirectly, use, disclose, distribute, print, or copy any part of this message if you are not the intended recipient. The sender or any of its subsidiaries each reserve the right to monitor all e-mail communications through its networks. ******************************************** On Mar 21, 2011, at 1:32 PM, Zboray,Michael wrote: > *John,* > * * > *The net here is that with 99% confidence, there is an infected laptop > inside of Gartner.* > *Not easy to track down.* > *Perhaps Mr. Tubbs can give us a destination address and a time.* > *It might allow us to map back to an IP address inside of Gartner.* > *However, given the prevalence of wifi useage, the best likely outcome > would be a zone or area.* > * * > *Mike* > * * > > *From*: J. Tubbs [mailto:] > *Sent*: Monday, March 21, 2011 09:30 AM > *To*: Pescatore,John > *Cc*: Karim Hijazi > > *Subject*: Re: Reporter > > John, > I have some more info for you regarding the infection status of the > host we have been discussing. > > It appeared to re-awaken on the Gartner network this morning around > 8am GMT. Screen shots included below. Hope this helps. > > -J. > > > > > > > On Mar 20, 2011, at 7:36 PM, Pescatore,John wrote: > > > > Thanks, Jerry – I passed that info onto our CSO on Saturday am and he > was trying to get it taken care of, the server seemed to be in the UK. > > Regards, John P. > > > *From:* J. Tubbs [mailto:jtubbs@unveillance.com] > *Sent:* Friday, March 18, 2011 7:11 PM > *To:* Pescatore,John > *Cc:* Karim Hijazi > *Subject:* Re: Reporter > > John, > Great to hear from you. > > Thank you so much for facilitating this contact with Mr. Sonne from > WSJ. We are looking forward to chatting with him about what we have > seen over the past several months in the Middle East and Northern Africa. > > On another note I wanted to bring the following to your attention per > Gartner's network. There is a host that appears to be behind a > gateway/nat in the NE US (Stamford, CT) per referencing maxmind's > geolocation assessment. This host initially interacted with our > sinkhole environment on March 3 and as late as earlier today. The > host is infected with Mariposa (autorun, palevo, rimecud, etc...), > variant A > (http://www.microsoft.com/security/portal/Threat/Encyclopedia/Entry.aspx?Name=Win32/Rimecud) > and the host is masking itself as DNS resolution calls, reaching out > to our sinkhole environment. If you require more information, please > let me know. > > Host detail: > 193.128.90.225 > AS7310 > Prefix: 193.128.90.0/24 > AS Name: GARTNERGROUP - Gartner Group > > Screenshots included below with additional detail. > > I hope this email finds you doing well. > > -J. > > > > > > > On Mar 18, 2011, at 1:08 PM, Pescatore,John wrote: > > > > Hi, Jerry – this WSJ reporter is working on a few stories about > Internet blocking and lawful intercept in general, and in the Mideast > in particular. I told him I knew of a company that had some very > interesting insight into how governments were controlling/blocking > connectivity during this “Jasmine Revolution” – his info is below if > you’d like to contact him. I said I’d forward this to the “company in > Atlanta” and let you decide. > > Regards, John P. > > > *From:* Sonne, Paul [mailto:Paul.Sonne@wsj.com] > *Sent:* Friday, March 18, 2011 1:03 PM > *To:* Pescatore,John > *Subject:* Report > > John > Thanks very much for your help again. > If you wouldn’t mind sending me the latest report and then pointing me > to the folks in Atlanta, that’d be great. > All best > Paul > > - - - - - - - - - - - - - - - - - - - - - - - - - - - > Paul Sonne > The Wall Street Journal > paul.sonne@wsj.com > +44 20 7842 9214 > +44 78 2482 2853 > > > ------------------------------------------------------------------------ > This e-mail message, including any attachments, is for the sole use of > the person to whom it has been sent, and may contain information that > is confidential or legally protected. If you are not the intended > recipient or have received this message in error, you are not > authorized to copy, distribute, or otherwise use this message or its > attachments. Please notify the sender immediately by return e-mail and > permanently delete this message and any attachments. Gartner makes no > warranty that this e-mail is error or virus free. > > -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (MingW32) iQEcBAEBAgAGBQJNiAPlAAoJEIk0Dw4U/G3lYdwIAKmPA+1Y9gqSWK/0o8QPY5L+ nChmAgkksKn20PiAMlb54OuL5VViAUea20i+aPXPA8DveMWu23O62/Wwt0ZdrL2W bWOMzjc/wSRpW4Je+pMs1tfTHiel5A8jercA1wYv3h2/AsBZaQJF31fB04Q/SCaJ /ovZghEBre1G9tfgMxIz3H2yj4BzEBdFzDpKCwFzmTbDLgB/MKnPeN6tWGjNYNEG uQp4y+aCorPf6Amtcdogx+Tg88pldUTb+qGTaOpaHjSJyTDMjdNcF2iwPwjhWWXv Q/xuDRp4j5yOI+Cqm0XKcy9NePkL7TT3zPfxtA/vdIjh9JvSvowo4FY9+idTurE= =Oy0z -----END PGP SIGNATURE----- From - Sat May 21 19:23:41 2011 X-Mozilla-Status: 0001 X-Mozilla-Status2: 00000000 Delivered-To: khijazi@unveillance.com Received: by 10.223.97.73 with SMTP id k9cs145775fan; Mon, 21 Mar 2011 19:19:54 -0700 (PDT) Received: by 10.150.103.14 with SMTP id a14mr4627609ybc.9.1300760393421; Mon, 21 Mar 2011 19:19:53 -0700 (PDT) Return-Path: Received: from mail-yx0-f173.google.com (mail-yx0-f173.google.com [209.85.213.173]) by mx.google.com with ESMTPS id r3si7013376yba.92.2011.03.21.19.19.53 (version=TLSv1/SSLv3 cipher=OTHER); Mon, 21 Mar 2011 19:19:53 -0700 (PDT) Received-SPF: pass (google.com: domain of ixheneti@gmail.com designates 209.85.213.173 as permitted sender) client-ip=209.85.213.173; Authentication-Results: mx.google.com; spf=pass (google.com: domain of ixheneti@gmail.com designates 209.85.213.173 as permitted sender) smtp.mail=ixheneti@gmail.com; dkim=pass (test mode) header.i=@gmail.com Received: by yxk8 with SMTP id 8so3283845yxk.4 for ; Mon, 21 Mar 2011 19:19:52 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:x-rim-org-msg-ref-id:message-id :content-transfer-encoding:reply-to:x-priority:references :in-reply-to:sensitivity:importance:subject:to:from:date :content-type:mime-version; bh=2ex0InyZKjhvpl0sWhvYgGCHFQHO+MDd8gqjGbuGoXw=; b=V2qjSOmqtprPZ7A3fkn1lQlg5qD7obTE7AmuWqM/lujgVuGtSRcMa9iVjxXa9cdXFq VwcVHGGXg/18UYQo8ceapvdJDhGS3R2mqkBDs5JqZbykevbAmIOkVu6D1QnGRlLS4KhI fLoWtsI1ykYkrpPlzzpNMtRThvKVZR+K+yIxE= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=x-rim-org-msg-ref-id:message-id:content-transfer-encoding:reply-to :x-priority:references:in-reply-to:sensitivity:importance:subject:to :from:date:content-type:mime-version; b=IzFkL3ZmWM0WDmXYJ/fRE97biSDE7aYwbwbkU69/dgqtUJ1rhyJO40++6eL0CN9VXB zAeQ0c4DX68BxNMqfBB/PDkCuNZ4iPjXc7Yg6Be647YgPudnSloNNXtEWBXEzV+mjR5U lgI4QYSl022kaBpjjw2CjFJcLKAG4q5hYO7/E= Received: by 10.150.171.6 with SMTP id t6mr4732609ybe.246.1300760392082; Mon, 21 Mar 2011 19:19:52 -0700 (PDT) Return-Path: Received: from bda023.bisx.prod.on.blackberry (bda-67-223-67-212.bise.na.blackberry.com [67.223.67.212]) by mx.google.com with ESMTPS id u75sm1726101yhn.55.2011.03.21.19.19.50 (version=SSLv3 cipher=OTHER); Mon, 21 Mar 2011 19:19:51 -0700 (PDT) X-rim-org-msg-ref-id: 1933417856 Message-ID: <1933417856-1300760388-cardhu_decombobulator_blackberry.rim.net-1807988895-@bda500.bisx.prod.on.blackberry> Content-Transfer-Encoding: base64 Reply-To: ixheneti@gmail.com X-Priority: Normal References: <4D83F4F5.3040604@unveillance.com> <4D87F413.4020202@unveillance.com> In-Reply-To: <4D87F413.4020202@unveillance.com> Sensitivity: Normal Importance: Normal Subject: Re: Karim Hijazi - Unveillance. Catching up! To: khijazi@unveillance.com From: "Irida Xheneti" Date: Tue, 22 Mar 2011 02:19:45 +0000 Content-Type: text/plain MIME-Version: 1.0 Tm9vbj8NCi0tLS0tT3JpZ2luYWwgTWVzc2FnZS0tLS0tDQpGcm9tOiBLYXJpbSBIaWphemkgVW52 ZWlsbGFuY2UgRW1haWwgPGtoaWphemlAdW52ZWlsbGFuY2UuY29tPg0KRGF0ZTogTW9uLCAyMSBN YXIgMjAxMSAxOTo1Nzo1NSANClRvOiBJcmlkYSBYaGVuZXRpPGl4aGVuZXRpQGdtYWlsLmNvbT4N ClJlcGx5LVRvOiBraGlqYXppQHVudmVpbGxhbmNlLmNvbQ0KU3ViamVjdDogUmU6IEthcmltIEhp amF6aSAtIFVudmVpbGxhbmNlLiBDYXRjaGluZyB1cCENCg0KLS0tLS1CRUdJTiBQR1AgU0lHTkVE IE1FU1NBR0UtLS0tLQ0KSGFzaDogU0hBMQ0KDQpIaSBJcmlkYSwNCg0KVGhhdCBzb3VuZHMgZ3Jl YXQuICBXaGF0IHRpbWUgd29ya3MgZm9yIHlvdSBvbiBUaHVyc2RheT8NCg0KVGhhbmtzLA0KDQpL YXJpbQ0KDQpPbiAzLzIxLzIwMTEgNjowMyBQTSwgSXJpZGEgWGhlbmV0aSB3cm90ZToNCj4gSGkg S2FyaW0sIA0KPiANCj4gR29vZCB0byBoZWFyIGZyb20geW91LiBJIGFtIHNvcnJ5IHdlIGhhdmVu J3QgYmVlbiBhYmxlIHRvIGNvbm5lY3QsIG15DQo+IGRheXMgaGF2ZSBzaHJ1bmsgdHJlbWVuZG91 c2x5IHdpdGggdGhlIG5ldyBwb3NpdGlvbi4uLmEgbG90IGdvaW5nIG9uLiA6KQ0KPiBHcmVhdCB0 byBoZWFyIGFib3V0IHRoZSBzdWNjZXNzIG9mIHlvdXIgd29yay4gDQo+IA0KPiBIb3cgZG9lcyBU aHVyc2RheSBhdCBub29uIGxvb2sgZm9yIHlvdT8gDQo+IA0KPiBUaGFua3MsDQo+IElyaWRhDQo+ IA0KPiBPbiBGcmksIE1hciAxOCwgMjAxMSBhdCA4OjEyIFBNLCBLYXJpbSBIaWphemkgVW52ZWls bGFuY2UgRW1haWwNCj4gPGtoaWphemlAdW52ZWlsbGFuY2UuY29tIDxtYWlsdG86a2hpamF6aUB1 bnZlaWxsYW5jZS5jb20+PiB3cm90ZToNCj4gDQo+IElyaWRhLA0KPiANCj4gSSBob3BlIHRoaXMg ZW1haWwgZmluZHMgeW91IHdlbGwuICBJIGtub3cgd2UgbWlzc2VkIGVhY2ggb3RoZXIgYSBmZXcN Cj4gdGltZXMgbGFzdCB5ZWFyIHdoaWNoIHdhcyB1bmZvcnR1bmF0ZSwgYnV0IHdlIGhhdmUgY29t ZSBhIGxvbmcgd2F5IHNpbmNlDQo+IHRoZW4uICBQZXJoYXBzIGl0IG1heSBoYXZlIGJlZW4gYSBi bGVzc2luZyBpbiBkaXNndWlzZS4NCj4gDQo+IFdlIGFyZSBtdWNoIG1vcmUgcG9pc2VkIGZvciBh IGNvbnZlcnNhdGlvbiB3aXRoIHlvdSByZWdhcmRpbmcgdGhlDQo+IHBvdGVudGlhbCBhcHBsaWNh dGlvbiBvdXIgc29sdXRpb24gY291bGQgaGF2ZSB3aXRoIE5vdmVsbC4gIFBsZWFzZSBsZXQNCj4g bWUga25vdyB3aGVuIHlvdSB3aWxsIGhhdmUgc29tZSB0aW1lIHRvIGRpc2N1c3MgYW5kIHBlcmhh cHMgZGVtbyBvdXINCj4gc29sdXRpb24uICBPdXIgQVBJIGlzIGN1cnJlbnRseSBiZWluZyBsZXZl cmFnZWQgYnkgc29tZSBzdWJzdGFudGlhbA0KPiBwbGF5ZXJzIGFuZCBJIHdvdWxkIGxvdmUgbm90 aGluZyBtb3JlIHRoYW4gdG8gYWRkIHlvdXIgZmlybSB0aGF0IHRoYXQNCj4gbGlzdC4gIEl0IGhh cyBiZWVuIGEgdmVyeSBsdWNyYXRpdmUgYWRkaXRpb24gZm9yIG91ciBwYXJ0bmVycyBhbmQgYQ0K PiBncmVhdCByZXZlbnVlIHN0cmVhbSBjaGFubmVsIGZvciB1cy4NCj4gDQo+IExvb2tpbmcgZm9y d2FyZCB0byBoZWFyaW5nIGZyb20geW91IQ0KPiANCg0KLSAtLSANCkFsbCB0aGUgYmVzdCwNCg0K S2FyaW0gSGlqYXppDQpDRU8gfCBQcmVzaWRlbnQNClVudmVpbGxhbmNlDQpPLiAoODAwKSA1NDAt ODQ3OA0KTS4gKDU2MSkgNTQyLTU3MDQNCnd3dy51bnZlaWxsYW5jZS5jb20NCmtoaWphemlAdW52 ZWlsbGFuY2UuY29tDQoNCioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioq KioqDQpDT05GSURFTlRJQUwgJiBQUklWSUxFR0VEIENPTU1VTklDQVRJT04gVGhpcyBtZXNzYWdl IGlzIGZvciB0aGUgbmFtZWQNCnBlcnNvbidzIHVzZSBvbmx5LiBUaGUgaW5mb3JtYXRpb24gY29u dGFpbmVkIGluIHRoaXMgY29tbXVuaWNhdGlvbiBpcw0KY29uZmlkZW50aWFsIGFuZC9vciBwcml2 aWxlZ2VkLCBwcm9wcmlldGFyeSBpbmZvcm1hdGlvbiB0aGF0IGlzDQp0cmFuc21pdHRlZCBzb2xl bHkgZm9yIHRoZSBwdXJwb3NlIG9mIHRoZSBpbnRlbmRlZCByZWNpcGllbnQocykuIE5vDQpjb25m aWRlbnRpYWxpdHkgb3IgcHJpdmlsZWdlIGlzIHdhaXZlZCBvciBsb3N0IGJ5IGFueSBtaXN0cmFu c21pc3Npb24uDQpJZiB5b3UgcmVjZWl2ZSB0aGlzIG1lc3NhZ2UgaW4gZXJyb3IsIHBsZWFzZSBp bW1lZGlhdGVseSBkZWxldGUgaXQgYW5kDQphbGwgY29waWVzIG9mIGl0IGZyb20geW91ciBzeXN0 ZW0sIGRlc3Ryb3kgYW55IGhhcmQgY29waWVzIG9mIGl0IGFuZA0Kbm90aWZ5IHRoZSBzZW5kZXIu IFlvdSBtdXN0IG5vdCwgZGlyZWN0bHkgb3IgaW5kaXJlY3RseSwgdXNlLCBkaXNjbG9zZSwNCmRp c3RyaWJ1dGUsIHByaW50LCBvciBjb3B5IGFueSBwYXJ0IG9mIHRoaXMgbWVzc2FnZSBpZiB5b3Ug YXJlIG5vdCB0aGUNCmludGVuZGVkIHJlY2lwaWVudC4gVGhlIHNlbmRlciBvciBhbnkgb2YgaXRz IHN1YnNpZGlhcmllcyBlYWNoIHJlc2VydmUNCnRoZSByaWdodCB0byBtb25pdG9yIGFsbCBlLW1h aWwgY29tbXVuaWNhdGlvbnMgdGhyb3VnaCBpdHMgbmV0d29ya3MuDQoqKioqKioqKioqKioqKioq KioqKioqKioqKioqKioqKioqKioqKioqKioqKg0KLS0tLS1CRUdJTiBQR1AgU0lHTkFUVVJFLS0t LS0NClZlcnNpb246IEdudVBHIHYxLjQuMTEgKE1pbmdXMzIpDQoNCmlRRWNCQUVCQWdBR0JRSk5o L1FUQUFvSkVJazBEdzRVL0czbC9jSUlBT2hZQnRnYUsySDErRTF0MXNkck1rS0oNCklWMkVnWXdM NlJXUHo1RFFPNm5razQ3TldXZzBpUGpHZUFEWmlEMU4vR3FUREF0S1RldFhlRkYwZXdZMDdXTUwN ClRPay9SNmlXVFZHT2ZuTU9makF2bFBiMHA4UHl4N3lUelcwT0JLRUM5ekQ1amdZTXZYOUdCWHgv SHgyb21MYS8NCndWSW85VGF2Y3J3QVg1VUwrMjBIYlFDUU9hQml4YUR3bWl3UzFJcVZ1MGd4ZUlL N1pRb0xDOW1Ld0tOL05YZmQNCnBLQWZUNm96S1B3djlCNU5HeStBU1ZVT0w3Uzl2dkdqMWVMT2FM U1F6S0xvZ3U5SzVZV2RRZW1PTEFtSWtuc0INCjN0ajRtMFVOZGNtUDJzMlplV2hwRGNBN3pweklH cUxaWDNQY3FiVTQ0M3Bna29Yd2lUZmN3K2FYc0lvZ2hFTT0NCj1GWHN3DQotLS0tLUVORCBQR1Ag U0lHTkFUVVJFLS0tLS0NCg== From - Sat May 21 19:23:41 2011 X-Mozilla-Status: 0001 X-Mozilla-Status2: 00000000 Return-Path: Received: from [192.168.1.102] (c-98-199-221-118.hsd1.tx.comcast.net [98.199.221.118]) by mx.google.com with ESMTPS id 35sm8199061ano.11.2011.03.21.19.20.07 (version=SSLv3 cipher=OTHER); Mon, 21 Mar 2011 19:20:08 -0700 (PDT) Message-ID: <4D880754.7080504@unveillance.com> Disposition-Notification-To: Karim Hijazi Unveillance Email Date: Mon, 21 Mar 2011 21:20:04 -0500 From: Karim Hijazi Unveillance Email Reply-To: khijazi@unveillance.com Organization: Unveillance User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.0; en-US; rv:1.9.2.15) Gecko/20110303 Lightning/1.0b2 Thunderbird/3.1.9 MIME-Version: 1.0 To: "Cossaboom, Jim (US - Glen Mills)" Subject: Unveillance - Defintel - Morrigan X-Enigmail-Version: 1.1.1 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hello Jim, I hope this email finds you well. I wanted to extend an offer to you again, to see the collective data set from Defintel and Morrigan via the Unveillance platform or our RESTful API. I don't know if you are aware, but we have a substantially larger sinkhole environment producing data than just the Defintel/Morrigan data set and we are certain that you will find it more than compelling. I either case, I would like to discuss working with you for the complete data set rather than just Deloitte's data as I understand that is the current parameters of your deal with Defintel/Morrigan. I suggest you at least entertain a conversation with us prior to finalizing your deal. In the meantime, please take a look at our latest regional information regarding malware ex-filtration from Libya: http://www.unveillance.com/latest-news/malware-activity-over-the-duration-of-the-2011-libyan-revolution/ Please let me know if you would be willing to discuss. - -- All the best, Karim Hijazi CEO | President Unveillance O. (800) 540-8478 M. (561) 542-5704 www.unveillance.com khijazi@unveillance.com ******************************************** CONFIDENTIAL & PRIVILEGED COMMUNICATION This message is for the named person's use only. The information contained in this communication is confidential and/or privileged, proprietary information that is transmitted solely for the purpose of the intended recipient(s). No confidentiality or privilege is waived or lost by any mistransmission. If you receive this message in error, please immediately delete it and all copies of it from your system, destroy any hard copies of it and notify the sender. You must not, directly or indirectly, use, disclose, distribute, print, or copy any part of this message if you are not the intended recipient. The sender or any of its subsidiaries each reserve the right to monitor all e-mail communications through its networks. ******************************************** -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (MingW32) iQEcBAEBAgAGBQJNiAdUAAoJEIk0Dw4U/G3lc60H/i94iM1pEWzzywPPuEwBiw14 GEgZKQJn+/JO69bWX1uPDAeR2ChHDNc++EtvNYU/uZ6zV9y/Fyekz1vrgWifrrZt 3SQHfbxja8K/lWZWyZG5Sg8g1uEOahL3bQj/Mfnj7udjS90Jl4sUvDGtPyvXvSFh L/xcoZvU+tNleEkBLNpLdtSNfwovbLpOe9yiG5fyz/f89rgA691VK3zMf6Pzlo0i qa00NYxFOuppFnKkLCpXbVCQWFcfFSuB/FuAfCFoVawBut7i+ARP01FvpZLMtxaq qxK9cO0D6o2U2m/W6FCPft4CVZfhQkDEopsu2jjhsn+JAL+xvNM0zBc/dMwaqKE= =mudJ -----END PGP SIGNATURE----- From - Sat May 21 19:23:41 2011 X-Mozilla-Status: 0001 X-Mozilla-Status2: 00000000 Return-Path: Received: from [192.168.1.102] (c-98-199-221-118.hsd1.tx.comcast.net [98.199.221.118]) by mx.google.com with ESMTPS id c38sm8200922anc.18.2011.03.21.19.23.26 (version=SSLv3 cipher=OTHER); Mon, 21 Mar 2011 19:23:27 -0700 (PDT) Message-ID: <4D88081B.7000508@unveillance.com> Disposition-Notification-To: Karim Hijazi Unveillance Email Date: Mon, 21 Mar 2011 21:23:23 -0500 From: Karim Hijazi Unveillance Email Reply-To: khijazi@unveillance.com Organization: Unveillance User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.0; en-US; rv:1.9.2.15) Gecko/20110303 Lightning/1.0b2 Thunderbird/3.1.9 MIME-Version: 1.0 To: ixheneti@gmail.com Subject: Re: Karim Hijazi - Unveillance. Catching up! References: <4D83F4F5.3040604@unveillance.com> <4D87F413.4020202@unveillance.com> <1933417856-1300760388-cardhu_decombobulator_blackberry.rim.net-1807988895-@bda500.bisx.prod.on.blackberry> In-Reply-To: <1933417856-1300760388-cardhu_decombobulator_blackberry.rim.net-1807988895-@bda500.bisx.prod.on.blackberry> X-Enigmail-Version: 1.1.1 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Noon is perfect... do you want me to send an invite to your Novell email? Thanks, Karim On 3/21/2011 9:19 PM, Irida Xheneti wrote: > Noon? > -----Original Message----- > From: Karim Hijazi Unveillance Email > Date: Mon, 21 Mar 2011 19:57:55 > To: Irida Xheneti > Reply-To: khijazi@unveillance.com > Subject: Re: Karim Hijazi - Unveillance. Catching up! > > Hi Irida, > > That sounds great. What time works for you on Thursday? > > Thanks, > > Karim > > On 3/21/2011 6:03 PM, Irida Xheneti wrote: >> Hi Karim, > >> Good to hear from you. I am sorry we haven't been able to connect, my >> days have shrunk tremendously with the new position...a lot going on. :) >> Great to hear about the success of your work. > >> How does Thursday at noon look for you? > >> Thanks, >> Irida > >> On Fri, Mar 18, 2011 at 8:12 PM, Karim Hijazi Unveillance Email >> > wrote: > >> Irida, > >> I hope this email finds you well. I know we missed each other a few >> times last year which was unfortunate, but we have come a long way since >> then. Perhaps it may have been a blessing in disguise. > >> We are much more poised for a conversation with you regarding the >> potential application our solution could have with Novell. Please let >> me know when you will have some time to discuss and perhaps demo our >> solution. Our API is currently being leveraged by some substantial >> players and I would love nothing more than to add your firm that that >> list. It has been a very lucrative addition for our partners and a >> great revenue stream channel for us. > >> Looking forward to hearing from you! > > - -- All the best, Karim Hijazi CEO | President Unveillance O. (800) 540-8478 M. (561) 542-5704 www.unveillance.com khijazi@unveillance.com ******************************************** CONFIDENTIAL & PRIVILEGED COMMUNICATION This message is for the named person's use only. The information contained in this communication is confidential and/or privileged, proprietary information that is transmitted solely for the purpose of the intended recipient(s). No confidentiality or privilege is waived or lost by any mistransmission. If you receive this message in error, please immediately delete it and all copies of it from your system, destroy any hard copies of it and notify the sender. You must not, directly or indirectly, use, disclose, distribute, print, or copy any part of this message if you are not the intended recipient. The sender or any of its subsidiaries each reserve the right to monitor all e-mail communications through its networks. ******************************************** -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (MingW32) iQEcBAEBAgAGBQJNiAgbAAoJEIk0Dw4U/G3lFaIH/2f5/qK7TAAryMm6FoV8EYV/ cpEXWZ7G8k8LRkMGg4kFgosDMWqLw1gcRPXEH8BumYlolnziqzqjflkPo+D0oJOi 50aCL8LBWNUsZvwMk2QkWo4AFd/Cqp94fVP86W76xe903uq+U5HuUGEweGH+w7Xy xiI7WRQOTBmM8AUkgneaySstd94oOvWMJFk3bXhllwQ9p4aTe/HQJ6iUyfyQtTYY dC9BxDY7PJkcVIfD75rkQiOoylpo8UKkd55bg24AKaeIgz6yPLVM+IJbYzfyaMzo cH3W+cRQQSazWrHxhRCpadlINKS6HPrBgT+MMfMrBCfcV8LaXxBYMVPle7zLg38= =7rUD -----END PGP SIGNATURE----- From - Sat May 21 19:23:41 2011 X-Mozilla-Status: 0001 X-Mozilla-Status2: 00000000 Return-Path: Received: from [192.168.1.102] (c-98-199-221-118.hsd1.tx.comcast.net [98.199.221.118]) by mx.google.com with ESMTPS id r8sm4038473ane.45.2011.03.21.19.31.16 (version=SSLv3 cipher=OTHER); Mon, 21 Mar 2011 19:31:17 -0700 (PDT) Message-ID: <4D8809F1.9020403@unveillance.com> Disposition-Notification-To: Karim Hijazi Unveillance Email Date: Mon, 21 Mar 2011 21:31:13 -0500 From: Karim Hijazi Unveillance Email Reply-To: khijazi@unveillance.com Organization: Unveillance User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.0; en-US; rv:1.9.2.15) Gecko/20110303 Lightning/1.0b2 Thunderbird/3.1.9 MIME-Version: 1.0 To: Peter Chronis Subject: Re: Unveillance Trial Agreement References: <4D83DF03.7020103@unveillance.com> <2ED4195B883A1149B9F7AA6BBB8313F616C5694037@atl-exch07.internal.earthlink.net> In-Reply-To: <2ED4195B883A1149B9F7AA6BBB8313F616C5694037@atl-exch07.internal.earthlink.net> X-Enigmail-Version: 1.1.1 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Pete, Sounds good my friend. I would love to do it, however that is literally the week that Brandy is due to deliver... :( Thank you for the potential. How are things coming with the project? Also anything that we can do with Fortinet? Best, karim On 3/19/2011 9:26 AM, Peter Chronis wrote: > Karim, > > I just received the updated doc yesterday from the legal team. We'll have to get it signed, hopefully next week. > > I am on the steering committee for Atlanta's Secure World Expo and have recommended they contact you about attending as a vendor. I have also offered to speak on " Using bot intelligence data to identify security risks on your company's network." I might be able to convince the conference to do a joint presentation with you if you are interested. Here are the details... > > http://www.secureworldexpo.com/events/index.php?id=294 > > Let me know. > > Pete > > -----Original Message----- > From: Karim Hijazi Unveillance Email [mailto:khijazi@unveillance.com] > Sent: Friday, March 18, 2011 6:39 PM > To: Peter Chronis > Subject: Unveillance Trial Agreement > > Hi Pete, > > Have you had a chance to get a revised trial agreement in place with the > appropriate dating? > > David is making prolific use of the API and everything seems to be > running quite smoothly on our end. Let me know how things are going > with you. > > Also, any references/contacts to Fortinet would be welcome if you can > spare them. Thanks Pete and speak with you soon. > - -- All the best, Karim Hijazi CEO | President Unveillance O. (800) 540-8478 M. (561) 542-5704 www.unveillance.com khijazi@unveillance.com ******************************************** CONFIDENTIAL & PRIVILEGED COMMUNICATION This message is for the named person's use only. The information contained in this communication is confidential and/or privileged, proprietary information that is transmitted solely for the purpose of the intended recipient(s). No confidentiality or privilege is waived or lost by any mistransmission. If you receive this message in error, please immediately delete it and all copies of it from your system, destroy any hard copies of it and notify the sender. You must not, directly or indirectly, use, disclose, distribute, print, or copy any part of this message if you are not the intended recipient. The sender or any of its subsidiaries each reserve the right to monitor all e-mail communications through its networks. ******************************************** -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (MingW32) iQEcBAEBAgAGBQJNiAnxAAoJEIk0Dw4U/G3lxdkIAMhnCo/q+1+gSw2NR5LCi1MM /wjCdjzYAvdb59TP7LOK/yTgiHZXv1J7eVqv/ve/JKOkzUhExLAoUjWCi+pPpglf YeoOy2GLlKah6erSdN6TaNsB4nNqVSwBNdT4QOEXduvonjEFN0yjcfSoQ3tbOlA4 aK4Rk5pGm76j021HPyow9kMjvxK17NRpm+HDo8RrbgjVBdwXhEWU805gQcrES194 H/i8++Nb8pJnuaMBbtIDwXuQL04tEGi9mNcYpO6+1VSCuaCiEjXgEpikScG4cWjF BVhUMWcMNj6G1BUzV3BLO7aQrXvPXFE7N0tUD+Cdi3cEHe6ehuNNC2yDX1eQ7WI= =o702 -----END PGP SIGNATURE----- From - Sat May 21 19:23:41 2011 X-Mozilla-Status: 0001 X-Mozilla-Status2: 00000000 Delivered-To: khijazi@unveillance.com Received: by 10.223.97.73 with SMTP id k9cs146672fan; Mon, 21 Mar 2011 20:12:12 -0700 (PDT) Received: by 10.150.186.21 with SMTP id j21mr4761203ybf.289.1300763531583; Mon, 21 Mar 2011 20:12:11 -0700 (PDT) Return-Path: Received: from bginmail.mgmmirage.com (bgoutmail.mgmmirage.com [63.165.24.94]) by mx.google.com with ESMTP id u2si15466162ybh.37.2011.03.21.20.12.10; Mon, 21 Mar 2011 20:12:11 -0700 (PDT) Received-SPF: pass (google.com: domain of t.verma@mgmresorts.com designates 63.165.24.94 as permitted sender) client-ip=63.165.24.94; Authentication-Results: mx.google.com; spf=pass (google.com: domain of t.verma@mgmresorts.com designates 63.165.24.94 as permitted sender) smtp.mail=t.verma@mgmresorts.com X-AuditID: c0a85b22-b7b52ae000006d63-40-4d88138a81c1 Received: from VLEXCHBH02P.MGMMIRAGE.ORG ( [10.76.51.115]) by bginmail.mgmmirage.com (SBG) with SMTP id B8.F7.28003.A83188D4; Mon, 21 Mar 2011 20:12:10 -0700 (PDT) Received: from PREXCHMB01P.MGMMIRAGE.ORG ([10.214.14.41]) by VLEXCHBH02P.MGMMIRAGE.ORG with Microsoft SMTPSVC(6.0.3790.4675); Mon, 21 Mar 2011 20:12:10 -0700 X-MimeOLE: Produced By Microsoft Exchange V6.5 Content-class: urn:content-classes:mdn MIME-Version: 1.0 Content-Type: multipart/report; report-type=disposition-notification; boundary="----_=_NextPart_001_01CBE83E.EE3A2681" Subject: Not read: Re: Karim Hijazi - Unveillance Date: Mon, 21 Mar 2011 20:12:09 -0700 Message-ID: X-MS-Has-Attach: X-MS-TNEF-Correlator: Thread-Topic: Karim Hijazi - Unveillance Thread-Index: Acugw+gkKJnTPQvgTeihoEeeRJAvWxHewYWE From: "Verma, Tonia" To: "Karim Hijazi Unveillance Email" Return-Path: t.verma@mgmresorts.com X-OriginalArrivalTime: 22 Mar 2011 03:12:10.0132 (UTC) FILETIME=[EEBF4540:01CBE83E] X-CFilter-Loop: Reflected X-Brightmail-Tracker: AAAAAA== This is a multi-part message in MIME format. ------_=_NextPart_001_01CBE83E.EE3A2681 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 WW91ciBtZXNzYWdlDQoNCiAgVG86ICAgICAgQWxscmVkLCBDeWQNCiAgQ2M6ICAgICAgUGVyZWly YSwgTWVsb2R5OyBUaG9tcHNvbiwgSmVycm9sZDsgVmVybWEsIFRvbmlhDQogIFN1YmplY3Q6IFJl OiBLYXJpbSBIaWphemkgLSBVbnZlaWxsYW5jZQ0KICBTZW50OiAgICBNb24sIDIwIERlYyAyMDEw IDIxOjAyOjI3IC0wNzAwDQoNCndhcyBub3QgcmVhZE1vbiwgMjEgTWFyIDIwMTEgMjA6MTI6MDkg LTA3MDDgqI0NCg== ------_=_NextPart_001_01CBE83E.EE3A2681 Content-Type: message/disposition-notification Content-Transfer-Encoding: 7bit Final-Recipient: RFC822; t.verma@mgmresorts.com Disposition: automatic-action/MDN-sent-automatically; deleted X-MSExch-Correlation-Key: HMTnpDI0Uk2BNLv25nHxXg== Original-Message-ID: <4D1026D3.2020704@unveillance.com> ------_=_NextPart_001_01CBE83E.EE3A2681-- From - Sat May 21 19:23:41 2011 X-Mozilla-Status: 0001 X-Mozilla-Status2: 00000000 Delivered-To: khijazi@unveillance.com Received: by 10.223.97.73 with SMTP id k9cs146773fan; Mon, 21 Mar 2011 20:17:12 -0700 (PDT) Received: by 10.224.176.205 with SMTP id bf13mr2039314qab.190.1300763830543; Mon, 21 Mar 2011 20:17:10 -0700 (PDT) Return-Path: Received: from mail-qy0-f180.google.com (mail-qy0-f180.google.com [209.85.216.180]) by mx.google.com with ESMTPS id e4si14065820qck.196.2011.03.21.20.17.09 (version=TLSv1/SSLv3 cipher=OTHER); Mon, 21 Mar 2011 20:17:09 -0700 (PDT) Received-SPF: neutral (google.com: 209.85.216.180 is neither permitted nor denied by best guess record for domain of mitch.halpin@niche-technology.com) client-ip=209.85.216.180; Authentication-Results: mx.google.com; spf=neutral (google.com: 209.85.216.180 is neither permitted nor denied by best guess record for domain of mitch.halpin@niche-technology.com) smtp.mail=mitch.halpin@niche-technology.com Received: by qyk10 with SMTP id 10so6611719qyk.4 for ; Mon, 21 Mar 2011 20:17:09 -0700 (PDT) MIME-Version: 1.0 Received: by 10.229.40.139 with SMTP id k11mr4152423qce.135.1300763828979; Mon, 21 Mar 2011 20:17:08 -0700 (PDT) Received: by 10.229.215.199 with HTTP; Mon, 21 Mar 2011 20:17:08 -0700 (PDT) In-Reply-To: <4D83E065.5060809@unveillance.com> References: <4D7DC0F5.9060405@unveillance.com> <4D7EF00D.6090107@unveillance.com> <4D83E065.5060809@unveillance.com> Date: Mon, 21 Mar 2011 20:17:08 -0700 Message-ID: Subject: Re: Malware Analysis System Description From: Mitch Halpin To: khijazi@unveillance.com Cc: Paul Royal Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable Karim, Sorry for the delay -- I signed the agreement a little earlier today. Sincerely, Mitch Halpin On Fri, Mar 18, 2011 at 3:44 PM, Karim Hijazi Unveillance Email wrote: > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > Gentlemen, > > Just a quick reminder that the executable version of the contract was > sent to Mitch via EchoSign. =A0It will be coming from the email address: > unveillance@gmail.com > > No rush, but just wanted to make sure you received it. =A0Looking forward > to chatting soon about the hardware requirements. =A0Take care. > > - -- > All the best, > > Karim Hijazi > CEO | President > Unveillance > O. (800) 540-8478 > M. (561) 542-5704 > www.unveillance.com > khijazi@unveillance.com > > ******************************************** > CONFIDENTIAL & PRIVILEGED COMMUNICATION This message is for the named > person's use only. The information contained in this communication is > confidential and/or privileged, proprietary information that is > transmitted solely for the purpose of the intended recipient(s). No > confidentiality or privilege is waived or lost by any mistransmission. > If you receive this message in error, please immediately delete it and > all copies of it from your system, destroy any hard copies of it and > notify the sender. You must not, directly or indirectly, use, disclose, > distribute, print, or copy any part of this message if you are not the > intended recipient. The sender or any of its subsidiaries each reserve > the right to monitor all e-mail communications through its networks. > ******************************************** > -----BEGIN PGP SIGNATURE----- > Version: GnuPG v1.4.11 (MingW32) > > iQEcBAEBAgAGBQJNg+BkAAoJEIk0Dw4U/G3lfH8H+wc2mdb/QEaRFHnyV8W549lp > 1o89pS3EjE773Sd0J6xtWSWugtQSrtcO3WoBixpNy1+gf2tc72XZ09WTwSuqLTo4 > XRfMgpxQr7jMDXkd7l54rqKuAydOIgXfE69O2VRYgIgQdsh6kFJTniwd4niPF7j1 > XEcdaWI1B8ZWNshuvsSI3PNhl0XDKoxuL/J2SgK3grHm+m/x1HHYFksDhwqCN9Gw > cOrofXFNOM+6TK3q+Few3emNw7Xj+IbPst0UiV9xw63691dimByfkDBB8+WhcQCp > zErC7JzKE8EuH5z8cEGa34sFmxD4moXKwt0o3/G3pOXk7cD3m+kPTGPQ77O9+38=3D > =3D5B/d > -----END PGP SIGNATURE----- > From - Sat May 21 19:23:41 2011 X-Mozilla-Status: 0001 X-Mozilla-Status2: 00000000 Return-Path: Received: from [192.168.1.102] (c-98-199-221-118.hsd1.tx.comcast.net [98.199.221.118]) by mx.google.com with ESMTPS id w4sm8244480anw.16.2011.03.21.20.20.37 (version=SSLv3 cipher=OTHER); Mon, 21 Mar 2011 20:20:38 -0700 (PDT) Message-ID: <4D881582.3050802@unveillance.com> Disposition-Notification-To: Karim Hijazi Unveillance Email Date: Mon, 21 Mar 2011 22:20:34 -0500 From: Karim Hijazi Unveillance Email Reply-To: khijazi@unveillance.com Organization: Unveillance User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.0; en-US; rv:1.9.2.15) Gecko/20110303 Lightning/1.0b2 Thunderbird/3.1.9 MIME-Version: 1.0 To: Christopher Kruegel CC: Giovanni Vigna Subject: Re: Quote for service References: <7D862538-20AA-45A7-86DD-441C216B72C5@tllod.com> In-Reply-To: X-Enigmail-Version: 1.1.1 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hello Christopher, I did have a chance and I apologize for the delay. Ever since funding, I have to push things through a legal team slowing everything to a crawl - - money is nice but the process is stifling. I meant to ask if we could pay monthly rather than the lump sum of $12K. In other words, we would begin our payments in April with a $1000 payment and continue accordingly. We will be happy to commit to a year but need to spread the payments. Will that be acceptable. If so I will convey back to legal and get this moving along. Thank you! Best, Karim On 3/21/2011 3:23 PM, Christopher Kruegel wrote: > Hi Karim, > >> In attachment you'll find our quote for the service. Please let me >> know if this is OK. You can then send us a PO and we will invoice you. > > just to follow up. did you have a chance to look at the license > document that we sent you last week? if so, could you please sign it and > send us back a copy. also, it would be great if you could send a > purchase order for our records. > > thank you, and best regards. > christopher - -- All the best, Karim Hijazi CEO | President Unveillance O. (800) 540-8478 M. (561) 542-5704 www.unveillance.com khijazi@unveillance.com ******************************************** CONFIDENTIAL & PRIVILEGED COMMUNICATION This message is for the named person's use only. The information contained in this communication is confidential and/or privileged, proprietary information that is transmitted solely for the purpose of the intended recipient(s). No confidentiality or privilege is waived or lost by any mistransmission. If you receive this message in error, please immediately delete it and all copies of it from your system, destroy any hard copies of it and notify the sender. You must not, directly or indirectly, use, disclose, distribute, print, or copy any part of this message if you are not the intended recipient. The sender or any of its subsidiaries each reserve the right to monitor all e-mail communications through its networks. ******************************************** -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (MingW32) iQEcBAEBAgAGBQJNiBWCAAoJEIk0Dw4U/G3lzBUH+waaJecT8pN+GQicuEISFVdR McFxFBHmqnWiqmmtesU/zmLYtCyLRvwNMVRB5OBhLfjRM/b7SzhSB6lK/KGaTjuV 7qzawZS1Tkw3NGo9EV0jYS2t2L5iq76aqTu33/WwkRMI2dyRqv69XBhfjnm8CPar /PdhSKGGcTJF74O5NdP8MVHfHuANv4V9h47hf/Mcqa6r8NKZGLI5dlL7RicFW7ZO qQ34nH3aHfilksscQ3HG/pfwZGKpg08srmH/q7JQjitBUKqN1pOOxpi+JYYV9j2A r4WWMjHnnGXYKh4Lz/ZesBMfJtH5nF3LsijAxNEuSuDuJVPRHNKB4GOQsNIgono= =UvjP -----END PGP SIGNATURE----- From - Sat May 21 19:23:41 2011 X-Mozilla-Status: 0001 X-Mozilla-Status2: 00000000 Return-Path: Received: from [192.168.1.102] (c-98-199-221-118.hsd1.tx.comcast.net [98.199.221.118]) by mx.google.com with ESMTPS id w39sm188899ana.13.2011.03.21.20.21.42 (version=SSLv3 cipher=OTHER); Mon, 21 Mar 2011 20:21:42 -0700 (PDT) Message-ID: <4D8815C3.6080104@unveillance.com> Disposition-Notification-To: Karim Hijazi Unveillance Email Date: Mon, 21 Mar 2011 22:21:39 -0500 From: Karim Hijazi Unveillance Email Reply-To: khijazi@unveillance.com Organization: Unveillance User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.0; en-US; rv:1.9.2.15) Gecko/20110303 Lightning/1.0b2 Thunderbird/3.1.9 MIME-Version: 1.0 To: Mitch Halpin CC: Paul Royal Subject: Re: Malware Analysis System Description References: <4D7DC0F5.9060405@unveillance.com> <4D7EF00D.6090107@unveillance.com> <4D83E065.5060809@unveillance.com> In-Reply-To: X-Enigmail-Version: 1.1.1 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mitch, Not a problem my friend. I counter-signed and you should have an executed copy in your email. Take care, Karim On 3/21/2011 10:17 PM, Mitch Halpin wrote: > Karim, > > Sorry for the delay -- I signed the agreement a little earlier today. > > Sincerely, > Mitch Halpin > > > On Fri, Mar 18, 2011 at 3:44 PM, Karim Hijazi Unveillance Email > wrote: > Gentlemen, > > Just a quick reminder that the executable version of the contract was > sent to Mitch via EchoSign. It will be coming from the email address: > unveillance@gmail.com > > No rush, but just wanted to make sure you received it. Looking forward > to chatting soon about the hardware requirements. Take care. > >> - -- All the best, Karim Hijazi CEO | President Unveillance O. (800) 540-8478 M. (561) 542-5704 www.unveillance.com khijazi@unveillance.com ******************************************** CONFIDENTIAL & PRIVILEGED COMMUNICATION This message is for the named person's use only. The information contained in this communication is confidential and/or privileged, proprietary information that is transmitted solely for the purpose of the intended recipient(s). No confidentiality or privilege is waived or lost by any mistransmission. If you receive this message in error, please immediately delete it and all copies of it from your system, destroy any hard copies of it and notify the sender. You must not, directly or indirectly, use, disclose, distribute, print, or copy any part of this message if you are not the intended recipient. The sender or any of its subsidiaries each reserve the right to monitor all e-mail communications through its networks. ******************************************** -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (MingW32) iQEcBAEBAgAGBQJNiBXCAAoJEIk0Dw4U/G3lbhwIAMVcTOvBQw1ilQJmaHS1avK7 sYcLtLCYRqk0Kz7BL2B80N1RjxT2gL+7j/wTwjctVO5PfbbFXQCkIcH0URdN5MXg U5Lbrg34eD/2vo7Cti0QRfVX2Og83jbpQo784wWkq3tB5EOo4jAs1vCN9qdXf07+ pdkp37MsGa3m/c+5s1t3GFlUFIhJKO3MljFuCImUAowUn8IfXtJNeRUOErctFTBO SsnbzfyXkE1Jgpe79zz27VcPYGFYxB7JFJnOFDrkv8avPR+dvYEklm2HJhckf1eb sinyXkLvXDQh2rcF01yi6cfNV6ZtbehLpBn57M3ToLJRNdEqvf51Hc02a/DY/Qs= =lD0m -----END PGP SIGNATURE-----