From - Sat May 21 19:28:33 2011 X-Mozilla-Status: 0001 X-Mozilla-Status2: 00000000 Delivered-To: khijazi@unveillance.com Received: by 10.14.119.13 with SMTP id m13cs134038eeh; Wed, 10 Nov 2010 17:13:37 -0800 (PST) Received: by 10.224.189.76 with SMTP id dd12mr244979qab.235.1289437711013; Wed, 10 Nov 2010 17:08:31 -0800 (PST) Received-SPF: neutral (google.com: 170.252.248.71 is neither permitted nor denied by best guess record for domain of unknown) client-ip=170.252.248.71; Received: by 10.241.83.225 with IMAP4 id 33mf191109qyl.70; Wed, 10 Nov 2010 17:08:31 -0800 (PST) X-Gmail-Fetch-Info: khijazi@unveillance.com@mail18.mydomainwebhost.com -1 mail18.mydomainwebhost.com 143 khijazi@unveillance.com Received: (qmail 26324 invoked from network); 28 Oct 2010 18:52:40 -0000 Received: from unknown (HELO amrmr1002.accenture.com) ([170.252.248.71]) by 66.11.233.58 with ESMTPS (DHE-RSA-AES256-SHA encrypted); 28 Oct 2010 18:52:40 -0000 Received-SPF: pass (66.11.233.58: domain of jason.lewkowicz@accenture.com designates 170.252.248.71 as permitted sender) receiver=66.11.233.58; client_ip=170.252.248.71; envelope-from=jason.lewkowicz@accenture.com; Received: from AMRXV1004.dir.svc.accenture.com (amrxv1004.dir.svc.accenture.com [10.10.160.64]) by amrmr1002.accenture.com (8.13.8/8.13.8) with ESMTP id o9SJ08BX018219 for ; Thu, 28 Oct 2010 14:00:31 -0500 (CDT) Received: from AMRXH3004.dir.svc.accenture.com ([10.63.34.26]) by AMRXV1004.dir.svc.accenture.com with Microsoft SMTPSVC(6.0.3790.3959); Thu, 28 Oct 2010 13:55:41 -0500 Received: from USAXH3002.dir.svc.accenture.com (10.67.122.162) by AMRXH3004.dir.svc.accenture.com (10.63.34.26) with Microsoft SMTP Server (TLS) id 8.2.254.0; Thu, 28 Oct 2010 14:55:40 -0400 Content-Transfer-Encoding: 7bit Received: from USAXM3111.dir.svc.accenture.com ([10.167.123.195]) by USAXH3002.dir.svc.accenture.com ([192.168.211.202]) with mapi; Thu, 28 Oct 2010 14:55:21 -0400 From: Content-Class: urn:content-classes:message Importance: normal Priority: normal X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.4657 To: Date: Thu, 28 Oct 2010 14:55:21 -0400 Subject: Read: Re: Quick Update Thread-Topic: Quick Update thread-index: Act20Z3ha3jMAPNISsaD1ZOgDHQpSQAAA3pW Message-ID: <84D3F8542F6A784DAFC83BDFF277E83E481D717DAB@USAXM3111.dir.svc.accenture.com> References: <4CC9C6EC.2000407@unveillance.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-Auto-Response-Suppress: All X-MS-TNEF-Correlator: acceptlanguage: en-US Content-Type: multipart/report; boundary="_000_84D3F8542F6A784DAFC83BDFF277E83E481D717DABUSAXM3111dirs_"; report-type=disposition-notification MIME-Version: 1.0 X-OriginalArrivalTime: 28 Oct 2010 18:55:41.0452 (UTC) FILETIME=[B7D36CC0:01CB76D1] This is a multi-part message in MIME format. --_000_84D3F8542F6A784DAFC83BDFF277E83E481D717DABUSAXM3111dirs_ Content-Type: multipart/alternative; boundary="_002_84D3F8542F6A784DAFC83BDFF277E83E481D717DABUSAXM3111dirs_" --_002_84D3F8542F6A784DAFC83BDFF277E83E481D717DABUSAXM3111dirs_ Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Your message was read on Thursday, October 28, 2010 2:55:21 PM = (GMT-05:00) Eastern Time (US & Canada). This message is for the designated recipient only and may contain = privileged, proprietary, or otherwise private information. If you have = received it in error, please notify the sender immediately and delete = the original. Any other use of the email by you is prohibited. --_002_84D3F8542F6A784DAFC83BDFF277E83E481D717DABUSAXM3111dirs_ Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable

Your message was read on = Thursday, October 28, 2010 2:55:21 PM (GMT-05:00) Eastern Time (US & = Canada).

This message is for the designated = recipient only and may contain privileged, proprietary, or otherwise = private information. If you have received it in error, please notify the = sender immediately and delete the original. Any other use of the email = by you is prohibited.

--_002_84D3F8542F6A784DAFC83BDFF277E83E481D717DABUSAXM3111dirs_-- --_000_84D3F8542F6A784DAFC83BDFF277E83E481D717DABUSAXM3111dirs_ Content-Transfer-Encoding: 7bit Content-Type: message/disposition-notification Final-recipient: RFC822; jason.lewkowicz@accenture.com Disposition: automatic-action/MDN-sent-automatically; displayed X-MSExch-Correlation-Key: DbD8VB5PHESmYCn1cs77/A== Original-Message-ID: <4CC9C6EC.2000407@unveillance.com> X-Display-Name: Lewkowicz, Jason --_000_84D3F8542F6A784DAFC83BDFF277E83E481D717DABUSAXM3111dirs_-- From - Sat May 21 19:28:33 2011 X-Mozilla-Status: 0001 X-Mozilla-Status2: 00000000 Delivered-To: khijazi@unveillance.com Received: by 10.14.119.13 with SMTP id m13cs134041eeh; Wed, 10 Nov 2010 17:13:39 -0800 (PST) Received: by 10.224.174.18 with SMTP id r18mr214409qaz.381.1289437711384; Wed, 10 Nov 2010 17:08:31 -0800 (PST) Received-SPF: neutral (google.com: 67.192.186.227 is neither permitted nor denied by best guess record for domain of unknown) client-ip=67.192.186.227; Received: by 10.241.83.225 with IMAP4 id 33mf191109qyl.70; Wed, 10 Nov 2010 17:08:31 -0800 (PST) X-Gmail-Fetch-Info: khijazi@unveillance.com@mail18.mydomainwebhost.com -1 mail18.mydomainwebhost.com 143 khijazi@unveillance.com Received: (qmail 21923 invoked from network); 28 Oct 2010 21:49:41 -0000 Received: from unknown (HELO foxlogicproductions.com) ([67.192.186.227]) by 66.11.233.58 with ESMTPS (DHE-RSA-AES256-SHA encrypted); 28 Oct 2010 21:49:41 -0000 Received-SPF: none (66.11.233.58: domain of rvela@demiurgeconsulting.com does not designate permitted sender hosts) Received: (qmail 4142 invoked from network); 28 Oct 2010 17:52:32 -0500 Received: from mobile-032-168-252-128.mycingular.net (HELO localhost) (32.168.252.128) by 67.192.183.162 with SMTP; 28 Oct 2010 17:52:30 -0500 Date: Thu, 28 Oct 2010 16:52:45 -0500 Subject: Re: Encrypted Mail Message-ID: From: Ruben Vela To: khijazi@unveillance.com Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: base64 S2FyaW0gd2hhdCdzIHVwIG1hbi4gSGF2ZW4ndCB0YWxrZWQgaW4gYSB3aGlsZSBqdXN0IGNoZWNr aW5nIHVwLiBIb3BlIGV2ZXJ5dGhpbmcncyBvawoKU2VudCBmcm9tIG15IFNhbXN1bmcgQ2FwdGl2 YXRlKHRtKSBvbiBBVCZUCgpLYXJpbSBIaWphemkgVW52ZWlsbGFuY2UgRW1haWwgPGtoaWphemlA dW52ZWlsbGFuY2UuY29tPiB3cm90ZToKCj4tLS0tLUJFR0lOIFBHUCBNRVNTQUdFLS0tLS0KPkNo YXJzZXQ6IElTTy04ODU5LTEKPlZlcnNpb246IEdudVBHIHYxLjQuMTAgKE1pbmdXMzIpCj4KPmhR RU1BeUdXU21hZ0s0a3JBUWYvWXkvNEo0NG1EWE9mbFdablN1ZnhuYmtGdmxFNXpmS3pzTU8vNWJO SjIvUmwKPkxWZ2lTc292Mm8xU3NwK2Uxd1lFV0s3UkFPekNIaDZneWtXZko2U2pTb2w5TXU0YjNI eDZGM1d3YU9xYmRuQ3oKPkdWQWcxNHhiODR1dHRDem8xbkNKazFhdHYzbFdXZjVTaTRWRFVJMXB1 TUFRYy9zd0kvejFIOEI3ZkRzbm1BYkMKPkMwbmhKNHhFaGtZcnhpNFZaSm04T2dLS2dlUVlBaU9u RTB2YlI1eUdPZ3lLNEhCcHhER01mZUV4OHNBTklVdlAKPjNpL3NmZ0VkbVJsNGRyTHRzZTN6U2U5 WXg0YkdDL1Rxa0FzM2ZFVmc3OHQyY0JrYjVpVkREdVZXRlB4Tk9zeVMKPnZuaHpMTW1nWHRhb3dN akZUK2NFTnZpVk9YdjFScC9hY3ZqbDZGR1J3WVVCREFOMU8zcXZ3VDIrT1FFSC9SeUcKPjFobVM4 dnJyNzUxWUFyM3dha3dqbFhEWm1SRFJJR00rZ3JPY1ZTbXpBS0pqM09xd1dCZnNXLzJtWjhCbnZP d0cKPnZNTmNGY0Q5dUVzMnAvWlBKVUtRNktxSHVVWDYxMk5uejZxWEN0Qnk5WFhzek9wdDdvdEVu SHhncmt2dlJIaHMKPmorckIxSG10TGJuazQ5a1lwMzRhZmxlbXdVZzhsWXNQSlU4eHpVWVVXdHFH NFV6RU9BSHdXVGdqeHdnNlczVUEKPmRxTEpkdGYwMHlIcW5STTMrSUp0UU1vZlJ0RXNZclFpenhL U3lJOEZhcTBoTzRnNEd3VkZmMnFVRWh1c2dkYzgKPkpBYW1JUTgvUFNYaitGVHdwcFBCV3RQa09i VWhyTENOZHBxMmZITmJYVlJzNkI0bGROL0Y2NWUzRkEzaGZDOUQKPmR6MnhJcFp3aWRqRnFnWFM5 dG5TNlFHYlpPZCtXQTlXT1N0a2xvZlpYQjdQUnlEK1F3MThDc0ZJK05ybjAwU3MKPnZvT2lOVUY1 bjdYTk9vRWZJY295RTZFQWx6TFkwcWVuYVZKT3B6VXdTRkJrVE83WjhSN0E1S0pPa3lqUmRjd3cK PnZTb0EwRjh5a3VYcHRvY2hIOFFNQ29ZUG54YVNHTDBocUsrM1RaalJMeE5LOGlFMzluRG1vTWJj bzJHR2t4ZWcKPlJlYmdRNHJjelp0WjY1a2MxOTE3UWZDSU55bzk2MU1JM0lCNmg3RDVTZUdRUmts KzNUT0JhWW9aWEticDJNVkgKPlFtckhpTFJMMDEyeU1GY0c4Q0g0bUFna2R0QjRiR1RGOUdvZTFM a1J3OVN0aGdwekFLYVRUelN2eTFHR2FLTE0KPmJBOTcrWmY5c3UzWkN4ekJNOWxMUlZNalJObnQ3 WHYvVzRhM2xkeVlONWVsbXFEYW5pOTYramQvU0ZCWjQ5QTQKPlgzdStWS01mNWRublIyazJaTE5n ZkFIZEVPT29ZNVBxandhaHduYzZyVXRkdzNDUHdSZy9pT2c0bUJCQnVrR3oKPjlqKy9sWXVNNEhF MXBmV2xNakZhR0lVVjh1WEJoVG0rd3BCSjR5NHlyZzlSQW9Xa2p6c3l1K1NiczBnSm10UUIKPjN4 TW9yZ1FWcDFjdnJ1Y1ZnZ1lsY0V0RzBWYmtqemRWUkxJMXAxdGx2REdwV3Y0VW5CbVJjRmRIZUZr dWxodjAKPm4xNmFwS0R0QWRNanVqRG41ZkZQeWZPdEkxUTdSaktoekJXVDdnbER6dUh5dVpUTHdo dDA0aUlGYmVVb2dIaEwKPmJCZ1lUSG0yZVJpaVJIY0VkZTBjd25RUWNTYWtiUnJISGM3UG1oSzZt NytBeDMzV0YyK09UVWphd1d4azJEZWcKPndTL0dwV1RkUWRnZzByR0xSTkN4dEhUNFlISnFuZmdC Y05aZkhibCtKRU81Y1dGVExGTDdFNjBKZ0RNVnpzSmcKPjVUVHFqT2kzWnZwRUszSS93UjNCNE1E c0JITGgwZmd1b3ZqQUJRS1VpV3cxTGRXbVFuTUZmQkNZa3I0eEFsYnQKPlFHQUxVOFpTc2l6OHcw QnkwSklMQktDdGlCTDJ3ZSs1c2xXYkU4d2UrUnJXYkU4SlEraXYvNU45d3orYUFJejQKPi9ORkFK RVRxNnUvbjBZVEhEQ1RRRE5EUXJ2NXdMeFI3RWlvSDBCL05mNzBhejhBbnl6bGtuZmQ5M2RoVGsz RFgKPlhxc3BTTkRFdDF0S3ZMU0plTUVkV0l2VTRxVk1KbythcFlOSFpJVFFSMWF5WVhoZTEzcWlH ZXROVTdvUDcvWEEKPlhLZjkvK01MbGZ1VGwxUDRuOEtXYTIwdkl0L040N00xMUEyVGI4bGp2ZGkz VGpaS3A3a3k2ZmVhSU5NbXUvL04KPldROTF2NVpoUnhhdjM2TEN0dkIvNnhxSTFpWDFLZFBBVkV5 cU92Q1U2Y1phTkpYcXJLRUlHbXhpcmkvVWs2SE4KPkZkaVkzbjBsbklRTzRYaDI5M05rN0xrNGp3 SUlncS9DVDhZbEJ2UHpCYzF1M2VobE5CR1Z5MDV4dVhiU3MzRmIKPmdSS2J5TUVqc0NESENPdWlp VVN6aHNqcjUyTHJsVUt6RXV4c2xhdlViT2VDWGQ0NElrdWNXTjZCVDFYM2tXQWgKPjN1bmNFazZR SGFMRGlLdkNQVkVVc1p3N3RWeGJiZWJOeis5V1BrRS9DNHk5dkpLajlVZmZSZGhaL3hBWmNDemQK Pk1xSzNuUHlhQnhXNEFaN05aNmdjQTgwPQo+PWVJWUYKPi0tLS0tRU5EIFBHUCBNRVNTQUdFLS0t LS0K From - Sat May 21 19:28:33 2011 X-Mozilla-Status: 0001 X-Mozilla-Status2: 00000000 Delivered-To: khijazi@unveillance.com Received: by 10.14.119.13 with SMTP id m13cs134042eeh; Wed, 10 Nov 2010 17:13:41 -0800 (PST) Received: by 10.224.182.137 with SMTP id cc9mr226319qab.320.1289437711188; Wed, 10 Nov 2010 17:08:31 -0800 (PST) Received-SPF: neutral (google.com: 216.9.248.28 is neither permitted nor denied by best guess record for domain of unknown) client-ip=216.9.248.28; Received: by 10.241.83.225 with IMAP4 id 33mf191109qyl.70; Wed, 10 Nov 2010 17:08:31 -0800 (PST) X-Gmail-Fetch-Info: khijazi@unveillance.com@mail18.mydomainwebhost.com -1 mail18.mydomainwebhost.com 143 khijazi@unveillance.com Received: (qmail 19697 invoked from network); 28 Oct 2010 19:53:11 -0000 Received: from unknown (HELO smtp14.bis.na.blackberry.com) ([216.9.248.28]) by 66.11.233.58 with SMTP; 28 Oct 2010 19:53:10 -0000 Received-SPF: pass (66.11.233.58: domain of SRS0=szVvl+=R6=earthlink.net=jwphillips80@srs.bis.na.blackberry.com designates 216.9.248.28 as permitted sender) receiver=66.11.233.58; client_ip=216.9.248.28; envelope-from=SRS0=szVvl+=R6=earthlink.net=jwphillips80@srs.bis.na.blackberry.com; Received: from bda480.bisx.prod.on.blackberry (bda480.bisx.prod.on.blackberry [172.20.218.25]) by srs.bis.na.blackberry.com (8.13.7 TEAMON/8.13.7) with ESMTP id o9SJtIdX029373 for khijazi@unveillance.com; Thu, 28 Oct 2010 19:56:27 GMT X-rim-org-msg-ref-id: 1328370424 Message-ID: <1328370424-1288295787-cardhu_decombobulator_blackberry.rim.net-1489127014-@bda480.bisx.prod.on.blackberry> Content-Transfer-Encoding: base64 Reply-To: jwphillips80@earthlink.net X-Priority: Normal References: <4CC9CE72.8070100@unveillance.com> In-Reply-To: <4CC9CE72.8070100@unveillance.com> Sensitivity: Normal Importance: Normal Subject: Re: Pricing sheet and calendar To: "Karim Hijazi Unveillance Email" From: jwphillips80@earthlink.net Date: Thu, 28 Oct 2010 19:56:23 +0000 Content-Type: text/plain MIME-Version: 1.0 S2FyaW0sDQoNClRoYW5rIHlvdSBmb3IgdGhlIHByaWNpbmcgYW5kIGRvY3MuIEkgaGF2ZSBub3Qg c3Bva2VuIHRvIEJydWNlIGFzIEkgb25seSByZXR1cm5lZCBmcm9tIFBob2VuaXggdGhpcyBtb3Ju aW5nLiBJIGhhdmUgdGhyZWUgMU0gcGx1cyBkZWFscyBJIGhhdmUgY2xvc2luZyB0aGlzIHF1YXJ0 ZXIuICBJIHdpbGwgY2FsbCBoaW0gdGhpcyBldmVuaW5nLiANCg0KTGV0J3MgdGFsayBpbiBhIGZl dyBob3VycyBpZiB5b3UgaGF2ZSBhbiBvcGVuaW5nIGluIHlvdXIgY2FsZW5kYXIuDQogDQpUaGFu ayB5b3UsDQpKb2huDQpTZW50IHZpYSBCbGFja0JlcnJ5IGJ5IEFUJlQNCg0KLS0tLS1PcmlnaW5h bCBNZXNzYWdlLS0tLS0NCkZyb206IEthcmltIEhpamF6aSBVbnZlaWxsYW5jZSBFbWFpbCA8a2hp amF6aUB1bnZlaWxsYW5jZS5jb20+DQpEYXRlOiBUaHUsIDI4IE9jdCAyMDEwIDE0OjI2OjQyIA0K VG86IEpvaG4gVy4gUGhpbGxpcHM8andwaGlsbGlwczgwQGVhcnRobGluay5uZXQ+DQpSZXBseS1U bzoga2hpamF6aUB1bnZlaWxsYW5jZS5jb20NClN1YmplY3Q6IFByaWNpbmcgc2hlZXQgYW5kIGNh bGVuZGFyDQoNCi0tLS0tQkVHSU4gUEdQIFNJR05FRCBNRVNTQUdFLS0tLS0NCkhhc2g6IFNIQTEN Cg0KSm9obiwNCg0KSSBob3BlIHRoaXMgZW1haWwgZmluZHMgeW91IHdlbGwuICBJIGFwb2xvZ2l6 ZSBmb3IgdGhlIGRlbGF5IHdoaWNoIGFzDQp1c3VhbCBpcyBkdWUgdG8gdG9vIG1hbnkgdGhpbmdz IHRvIGRvIGFuZCB0b28gbGl0dGxlIHRpbWUuDQoNCkF0dGFjaGVkIGFyZSBvdXIgcHJpY2luZyBz aGVldHMgYXMgd2VsbCBhcyBzb21lIG9mIG91ciBtYXJrZXRpbmcgbWF0ZXJpYWwuDQoNCkkgaG9w ZSB5b3UgaGF2ZSBoYWQgYSBjaGFuY2UgdG8gc3BlYWsgdG8gQnJ1Y2U7IGhlIGhhcyBjYWxsZWQg bWUgcXVpdGUgYQ0KYml0IGxhdGVseSB3aGljaCBsZWFkcyBtZSB0byBiZWxpZXZlIGhlIGlzIGNv bmNlcm5lZC4NCg0KQXMgZm9yIG15IGNhbGVuZGFyLCBJIGFtIHF1aXRlIG9wZW4gbmV4dCB3ZWVr IGZvciBhIHZpcnR1YWwgbWVldGluZyhzKQ0KdmlhIGVpdGhlciBHb1RvTWVldGluZyBvciBXZWJF eC4gIExldCBtZSBrbm93IGEgdGltZSBhbmQgSSB3aWxsDQpjZXJ0YWlubHkgYWNjb21tb2RhdGUu DQoNClRoYW5rcyBhZ2FpbiBmb3IgeW91ciBwYXRpZW5jZSBKb2huIGFuZCBJIGxvb2sgZm9yd2Fy ZCB0byBzcGVha2luZyB3aXRoDQp5b3Ugc29vbi4gIFRha2UgY2FyZS4NCg0KLSAtLSANCkFsbCB0 aGUgYmVzdCwNCg0KS2FyaW0gSGlqYXppDQpDRU8gfCBQcmVzaWRlbnQNClVudmVpbGxhbmNlLCBM TEMNCk8uICg0MDQpIDU4NS03NDg3DQpNLiAoNTYxKSA1NDItNTcwNA0Kd3d3LnVudmVpbGxhbmNl LmNvbQ0Ka2hpamF6aUB1bnZlaWxsYW5jZS5jb20NCg0KKioqKioqKioqKioqKioqKioqKioqKioq KioqKioqKioqKioqKioqKioqKioNCkNPTkZJREVOVElBTCAmIFBSSVZJTEVHRUQgQ09NTVVOSUNB VElPTiBUaGlzIG1lc3NhZ2UgaXMgZm9yIHRoZSBuYW1lZA0KcGVyc29uJ3MgdXNlIG9ubHkuIFRo ZSBpbmZvcm1hdGlvbiBjb250YWluZWQgaW4gdGhpcyBjb21tdW5pY2F0aW9uIGlzDQpjb25maWRl bnRpYWwgYW5kL29yIHByaXZpbGVnZWQsIHByb3ByaWV0YXJ5IGluZm9ybWF0aW9uIHRoYXQgaXMN CnRyYW5zbWl0dGVkIHNvbGVseSBmb3IgdGhlIHB1cnBvc2Ugb2YgdGhlIGludGVuZGVkIHJlY2lw aWVudChzKS4gTm8NCmNvbmZpZGVudGlhbGl0eSBvciBwcml2aWxlZ2UgaXMgd2FpdmVkIG9yIGxv c3QgYnkgYW55IG1pc3RyYW5zbWlzc2lvbi4NCklmIHlvdSByZWNlaXZlIHRoaXMgbWVzc2FnZSBp biBlcnJvciwgcGxlYXNlIGltbWVkaWF0ZWx5IGRlbGV0ZSBpdCBhbmQNCmFsbCBjb3BpZXMgb2Yg aXQgZnJvbSB5b3VyIHN5c3RlbSwgZGVzdHJveSBhbnkgaGFyZCBjb3BpZXMgb2YgaXQgYW5kDQpu b3RpZnkgdGhlIHNlbmRlci4gWW91IG11c3Qgbm90LCBkaXJlY3RseSBvciBpbmRpcmVjdGx5LCB1 c2UsIGRpc2Nsb3NlLA0KZGlzdHJpYnV0ZSwgcHJpbnQsIG9yIGNvcHkgYW55IHBhcnQgb2YgdGhp cyBtZXNzYWdlIGlmIHlvdSBhcmUgbm90IHRoZQ0KaW50ZW5kZWQgcmVjaXBpZW50LiBUaGUgc2Vu ZGVyIG9yIGFueSBvZiBpdHMgc3Vic2lkaWFyaWVzIGVhY2ggcmVzZXJ2ZQ0KdGhlIHJpZ2h0IHRv IG1vbml0b3IgYWxsIGUtbWFpbCBjb21tdW5pY2F0aW9ucyB0aHJvdWdoIGl0cyBuZXR3b3Jrcy4N CioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioqDQotLS0tLUJFR0lO IFBHUCBTSUdOQVRVUkUtLS0tLQ0KVmVyc2lvbjogR251UEcgdjEuNC4xMCAoTWluZ1czMikNCg0K aVFFY0JBRUJBZ0FHQlFKTXljNXlBQW9KRUlrMER3NFUvRzNseHJrSUFONThmT2pFSVB2OUdvWUFO eFdIUlIyMw0KRFBtbUpTa25qcmN5SHY5Q1BqWVUzTnZuTGR2M3gzYzB3QVRhWjVJREtrdU9nMUNC a2R4VEFxbU9nOUtNc25YcQ0KVHI1WFRmSms5ZkpjUmNBdXBGRU80cktabU1XUlBlekpiSTBpcGE3 Q2pmSmRPMG12b2lXa1QxSnVIWU5zS3poWQ0KbWhsMUkvY0UxL2pUNkltTDlTWnhUbHhkYjRsc0Yw MHd6RjBPYlRZY3BjTzFlMmtXWDFRVHNtMkUwcXRUSW54WQ0KdnlHZ1dqQU9mNitkTXVQTFlrWmZx Z1p4TERjR0dHejhrb0dzSzM5dkZIcXVJVElLWXdEVk52dEtobUJmemordA0Kb2djOXROREdZYlAv RU9hSUY4d0dIZ0tseVhIT1BFT1Qyd1BxT09wQ1FuZTBYdW1qb1hvL21WZm1rcTViMW1zPQ0KPTNj NEoNCi0tLS0tRU5EIFBHUCBTSUdOQVRVUkUtLS0tLQ0KDQo= From - Sat May 21 19:28:33 2011 X-Mozilla-Status: 0001 X-Mozilla-Status2: 00000000 Delivered-To: khijazi@unveillance.com Received: by 10.14.119.13 with SMTP id m13cs134043eeh; Wed, 10 Nov 2010 17:13:43 -0800 (PST) Received: by 10.224.174.8 with SMTP id r8mr211711qaz.332.1289437711544; Wed, 10 Nov 2010 17:08:31 -0800 (PST) Received-SPF: neutral (google.com: 99.1.188.105 is neither permitted nor denied by best guess record for domain of unknown) client-ip=99.1.188.105; Received: by 10.241.83.225 with IMAP4 id 33mf191109qyl.70; Wed, 10 Nov 2010 17:08:31 -0800 (PST) X-Gmail-Fetch-Info: khijazi@unveillance.com@mail18.mydomainwebhost.com -1 mail18.mydomainwebhost.com 143 khijazi@unveillance.com Received: (qmail 20337 invoked from network); 28 Oct 2010 22:15:08 -0000 Received: from unknown (HELO ?192.168.1.75?) (jtubbs@unveillance.com@[99.1.188.105]) by 66.11.233.58 with ESMTPS (AES128-SHA encrypted); 28 Oct 2010 22:15:08 -0000 Subject: Re: Tremendous conversation and a pleasure to meet you both Mime-Version: 1.0 (Apple Message framework v1081) Content-Type: text/plain; charset=us-ascii From: "J. Tubbs" In-Reply-To: <97EDE675-D7A3-430A-A4AD-FAEAA27F9A52@cs.ucsb.edu> Date: Thu, 28 Oct 2010 18:18:26 -0400 Cc: Giovanni Vigna , khijazi@unveillance.com Content-Transfer-Encoding: quoted-printable Message-Id: References: <4CC84FF4.9020602@unveillance.com> <4F861833-F4DA-48B3-AE9D-D8E6F9E02740@unveillance.com> <7CE73C1E-D5C5-4689-9801-2F67A33EDF12@cs.ucsb.edu> <4CC99855.10905@unveillance.com> <81BA88ED-F880-42D9-AB9D-B7F2C693CD8A@unveillance.com> <97EDE675-D7A3-430A-A4AD-FAEAA27F9A52@cs.ucsb.edu> To: Christopher Kruegel X-Mailer: Apple Mail (2.1081) Glad that you guys like it. Correct, a lot of the data lifted in the portal is sinkholed activity. The one that seems to be showing up the most for ya is Artro. You may = know more about it than I do. I certainly do not proclaim myself to be = a malware expert by any stretch of the imagination, I am more of a big = data guy but with more than common knowledge of interactive malware, = etc... Artro is Zeus-like malware as is it's C&C = infrastructure/modeling. At first, it was thought to be an updated = version of Zeus, but later research revealed this not to be true. Per = it's name, it seemed to use a lot of C&C domains that were artistic in = nature by name, thus the name Artro. It's key-logger / IP-theft driven = malware, which is pretty standard nowadays it seems. Vintage RBN. It's awesome that you guys have been exposed to Praetorian now, as it = will make a product demo a little more fluid. Karim and I would still = like to give you guys a proper demo after you are settled from your = present travels. Regardless, feel free to use it as much as you wish = until we can meet up for a demo / walk-through. As always, if you have any questions/comments, please send them my way. -J. On Oct 28, 2010, at 6:01 PM, Christopher Kruegel wrote: > great stuff, indeed. thanks for sharing. >=20 >> I already gave a fast look and it seems that our lab is responsible = for 90% of malicious activity (understandably so!) >=20 > yes, most of the stuff is coming from the 192.35.222.0/24 network, = which is the one where we run our analysis systems from (Anubis, = Wepawet) - we call it the "bad network" ;). I would be interested in = understanding how this activity is picked up by your sensors. it seems = that we are hitting a sinkhole. >=20 > thanks. > christopher From - Sat May 21 19:28:33 2011 X-Mozilla-Status: 0001 X-Mozilla-Status2: 00000000 Delivered-To: khijazi@unveillance.com Received: by 10.14.119.13 with SMTP id m13cs134044eeh; Wed, 10 Nov 2010 17:13:43 -0800 (PST) Received: by 10.224.184.131 with SMTP id ck3mr268960qab.222.1289437711757; Wed, 10 Nov 2010 17:08:31 -0800 (PST) Received-SPF: neutral (google.com: 216.9.248.58 is neither permitted nor denied by best guess record for domain of unknown) client-ip=216.9.248.58; Received: by 10.241.83.225 with IMAP4 id 33mf191109qyl.70; Wed, 10 Nov 2010 17:08:31 -0800 (PST) X-Gmail-Fetch-Info: khijazi@unveillance.com@mail18.mydomainwebhost.com -1 mail18.mydomainwebhost.com 143 khijazi@unveillance.com Received: (qmail 4027 invoked from network); 29 Oct 2010 00:24:10 -0000 Received: from unknown (HELO smtp16.bis.na.blackberry.com) ([216.9.248.58]) by 66.11.233.58 with SMTP; 29 Oct 2010 00:24:10 -0000 Received-SPF: pass (66.11.233.58: domain of SRS0=Iwp8y2=R7=earthlink.net=jwphillips80@srs.bis.na.blackberry.com designates 216.9.248.58 as permitted sender) receiver=66.11.233.58; client_ip=216.9.248.58; envelope-from=SRS0=Iwp8y2=R7=earthlink.net=jwphillips80@srs.bis.na.blackberry.com; Received: from bda480.bisx.prod.on.blackberry (bda480.bisx.prod.on.blackberry [172.20.218.25]) by srs.bis.na.blackberry.com (8.13.7 TEAMON/8.13.7) with ESMTP id o9SNQIkP016768 for khijazi@unveillance.com; Fri, 29 Oct 2010 00:27:29 GMT X-rim-org-msg-ref-id: 854596930 Message-ID: <854596930-1288312049-cardhu_decombobulator_blackberry.rim.net-1140700667-@bda480.bisx.prod.on.blackberry> Content-Transfer-Encoding: base64 Reply-To: jwphillips80@earthlink.net X-Priority: Normal References: <4CC9CE72.8070100@unveillance.com> In-Reply-To: <4CC9CE72.8070100@unveillance.com> Sensitivity: Normal Importance: Normal Subject: Re: Pricing sheet and calendar To: "Karim Hijazi Unveillance Email" From: jwphillips80@earthlink.net Date: Fri, 29 Oct 2010 00:27:32 +0000 Content-Type: text/plain MIME-Version: 1.0 SWYgeW91IGhhdmUgYSBtaW51dGUgdG8gdGFsaywgbGV0IG1lIGtub3cuIA0KDQpUaGFua3MNCkpv aG4NClNlbnQgdmlhIEJsYWNrQmVycnkgYnkgQVQmVA0KDQotLS0tLU9yaWdpbmFsIE1lc3NhZ2Ut LS0tLQ0KRnJvbTogS2FyaW0gSGlqYXppIFVudmVpbGxhbmNlIEVtYWlsIDxraGlqYXppQHVudmVp bGxhbmNlLmNvbT4NCkRhdGU6IFRodSwgMjggT2N0IDIwMTAgMTQ6MjY6NDIgDQpUbzogSm9obiBX LiBQaGlsbGlwczxqd3BoaWxsaXBzODBAZWFydGhsaW5rLm5ldD4NClJlcGx5LVRvOiBraGlqYXpp QHVudmVpbGxhbmNlLmNvbQ0KU3ViamVjdDogUHJpY2luZyBzaGVldCBhbmQgY2FsZW5kYXINCg0K LS0tLS1CRUdJTiBQR1AgU0lHTkVEIE1FU1NBR0UtLS0tLQ0KSGFzaDogU0hBMQ0KDQpKb2huLA0K DQpJIGhvcGUgdGhpcyBlbWFpbCBmaW5kcyB5b3Ugd2VsbC4gIEkgYXBvbG9naXplIGZvciB0aGUg ZGVsYXkgd2hpY2ggYXMNCnVzdWFsIGlzIGR1ZSB0byB0b28gbWFueSB0aGluZ3MgdG8gZG8gYW5k IHRvbyBsaXR0bGUgdGltZS4NCg0KQXR0YWNoZWQgYXJlIG91ciBwcmljaW5nIHNoZWV0cyBhcyB3 ZWxsIGFzIHNvbWUgb2Ygb3VyIG1hcmtldGluZyBtYXRlcmlhbC4NCg0KSSBob3BlIHlvdSBoYXZl IGhhZCBhIGNoYW5jZSB0byBzcGVhayB0byBCcnVjZTsgaGUgaGFzIGNhbGxlZCBtZSBxdWl0ZSBh DQpiaXQgbGF0ZWx5IHdoaWNoIGxlYWRzIG1lIHRvIGJlbGlldmUgaGUgaXMgY29uY2VybmVkLg0K DQpBcyBmb3IgbXkgY2FsZW5kYXIsIEkgYW0gcXVpdGUgb3BlbiBuZXh0IHdlZWsgZm9yIGEgdmly dHVhbCBtZWV0aW5nKHMpDQp2aWEgZWl0aGVyIEdvVG9NZWV0aW5nIG9yIFdlYkV4LiAgTGV0IG1l IGtub3cgYSB0aW1lIGFuZCBJIHdpbGwNCmNlcnRhaW5seSBhY2NvbW1vZGF0ZS4NCg0KVGhhbmtz IGFnYWluIGZvciB5b3VyIHBhdGllbmNlIEpvaG4gYW5kIEkgbG9vayBmb3J3YXJkIHRvIHNwZWFr aW5nIHdpdGgNCnlvdSBzb29uLiAgVGFrZSBjYXJlLg0KDQotIC0tIA0KQWxsIHRoZSBiZXN0LA0K DQpLYXJpbSBIaWphemkNCkNFTyB8IFByZXNpZGVudA0KVW52ZWlsbGFuY2UsIExMQw0KTy4gKDQw NCkgNTg1LTc0ODcNCk0uICg1NjEpIDU0Mi01NzA0DQp3d3cudW52ZWlsbGFuY2UuY29tDQpraGlq YXppQHVudmVpbGxhbmNlLmNvbQ0KDQoqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioq KioqKioqKioqKg0KQ09ORklERU5USUFMICYgUFJJVklMRUdFRCBDT01NVU5JQ0FUSU9OIFRoaXMg bWVzc2FnZSBpcyBmb3IgdGhlIG5hbWVkDQpwZXJzb24ncyB1c2Ugb25seS4gVGhlIGluZm9ybWF0 aW9uIGNvbnRhaW5lZCBpbiB0aGlzIGNvbW11bmljYXRpb24gaXMNCmNvbmZpZGVudGlhbCBhbmQv b3IgcHJpdmlsZWdlZCwgcHJvcHJpZXRhcnkgaW5mb3JtYXRpb24gdGhhdCBpcw0KdHJhbnNtaXR0 ZWQgc29sZWx5IGZvciB0aGUgcHVycG9zZSBvZiB0aGUgaW50ZW5kZWQgcmVjaXBpZW50KHMpLiBO bw0KY29uZmlkZW50aWFsaXR5IG9yIHByaXZpbGVnZSBpcyB3YWl2ZWQgb3IgbG9zdCBieSBhbnkg bWlzdHJhbnNtaXNzaW9uLg0KSWYgeW91IHJlY2VpdmUgdGhpcyBtZXNzYWdlIGluIGVycm9yLCBw bGVhc2UgaW1tZWRpYXRlbHkgZGVsZXRlIGl0IGFuZA0KYWxsIGNvcGllcyBvZiBpdCBmcm9tIHlv dXIgc3lzdGVtLCBkZXN0cm95IGFueSBoYXJkIGNvcGllcyBvZiBpdCBhbmQNCm5vdGlmeSB0aGUg c2VuZGVyLiBZb3UgbXVzdCBub3QsIGRpcmVjdGx5IG9yIGluZGlyZWN0bHksIHVzZSwgZGlzY2xv c2UsDQpkaXN0cmlidXRlLCBwcmludCwgb3IgY29weSBhbnkgcGFydCBvZiB0aGlzIG1lc3NhZ2Ug aWYgeW91IGFyZSBub3QgdGhlDQppbnRlbmRlZCByZWNpcGllbnQuIFRoZSBzZW5kZXIgb3IgYW55 IG9mIGl0cyBzdWJzaWRpYXJpZXMgZWFjaCByZXNlcnZlDQp0aGUgcmlnaHQgdG8gbW9uaXRvciBh bGwgZS1tYWlsIGNvbW11bmljYXRpb25zIHRocm91Z2ggaXRzIG5ldHdvcmtzLg0KKioqKioqKioq KioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioNCi0tLS0tQkVHSU4gUEdQIFNJR05B VFVSRS0tLS0tDQpWZXJzaW9uOiBHbnVQRyB2MS40LjEwIChNaW5nVzMyKQ0KDQppUUVjQkFFQkFn QUdCUUpNeWM1eUFBb0pFSWswRHc0VS9HM2x4cmtJQU41OGZPakVJUHY5R29ZQU54V0hSUjIzDQpE UG1tSlNrbmpyY3lIdjlDUGpZVTNOdm5MZHYzeDNjMHdBVGFaNUlES2t1T2cxQ0JrZHhUQXFtT2c5 S01zblhxDQpUcjVYVGZKazlmSmNSY0F1cEZFTzRyS1ptTVdSUGV6SmJJMGlwYTdDamZKZE8wbXZv aVdrVDFKdUhZTnNLemhZDQptaGwxSS9jRTEvalQ2SW1MOVNaeFRseGRiNGxzRjAwd3pGME9iVFlj cGNPMWUya1dYMVFUc20yRTBxdFRJbnhZDQp2eUdnV2pBT2Y2K2RNdVBMWWtaZnFnWnhMRGNHR0d6 OGtvR3NLMzl2RkhxdUlUSUtZd0RWTnZ0S2htQmZ6ait0DQpvZ2M5dE5ER1liUC9FT2FJRjh3R0hn S2x5WEhPUEVPVDJ3UHFPT3BDUW5lMFh1bWpvWG8vbVZmbWtxNWIxbXM9DQo9M2M0Sg0KLS0tLS1F TkQgUEdQIFNJR05BVFVSRS0tLS0tDQoNCg== From - Sat May 21 19:28:33 2011 X-Mozilla-Status: 0001 X-Mozilla-Status2: 00000000 Delivered-To: khijazi@unveillance.com Received: by 10.14.119.13 with SMTP id m13cs134045eeh; Wed, 10 Nov 2010 17:13:43 -0800 (PST) Received: by 10.224.191.72 with SMTP id dl8mr261813qab.165.1289437711873; Wed, 10 Nov 2010 17:08:31 -0800 (PST) Received-SPF: neutral (google.com: 99.1.188.105 is neither permitted nor denied by best guess record for domain of unknown) client-ip=99.1.188.105; Received: by 10.241.83.225 with IMAP4 id 33mf191109qyl.70; Wed, 10 Nov 2010 17:08:31 -0800 (PST) X-Gmail-Fetch-Info: khijazi@unveillance.com@mail18.mydomainwebhost.com -1 mail18.mydomainwebhost.com 143 khijazi@unveillance.com Received: (qmail 7893 invoked from network); 29 Oct 2010 01:08:32 -0000 Received: from unknown (HELO ?192.168.1.68?) (jtubbs@unveillance.com@[99.1.188.105]) by 66.11.233.58 with ESMTPS (AES128-SHA encrypted); 29 Oct 2010 01:08:31 -0000 Subject: Re: Chris and Giovanni Data References: <4CCA1483.3090909@unveillance.com> From: "J. Tubbs" Content-Type: text/plain; charset=us-ascii X-Mailer: iPhone Mail (8B117) In-Reply-To: <4CCA1483.3090909@unveillance.com> Message-Id: <5034CBE1-D90F-4095-A937-F4FDA6D5023B@unveillance.com> Date: Thu, 28 Oct 2010 21:11:49 -0400 To: "khijazi@unveillance.com" Content-Transfer-Encoding: quoted-printable Mime-Version: 1.0 (iPhone Mail 8B117) Much thanks to you for getting the workstation. Its the first time in many y= ears anyone has made any professional sacrifices for me. People are typical= ly happy just to do a little less than enough to get by without anyone reall= y caring to notice. I'm not 100% sure what data they have and wish to share. I'd prefer you to s= tart the discussion with them on that front given you will ultimately end up= negotiating the terms as you did with chris. I frankly would not feel comf= ortable doing soon considering you have put your money into the company. Did David say that they had some interesting data or are they only intereste= d in trying to grow their remediation efforts given almost all that they spo= ke about during our discussion the other day was purely about just that. Let me know what you think. -J. On Oct 28, 2010, at 20:25, Karim Hijazi Unveillance Email wrote: > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 >=20 > Hi J. - >=20 > Hope things are going well with the system setup. I am happy to see the > favorable response from Chris and Giovanni... I think they see real > value there. >=20 > On that note, I think it is fair to compose an email request to start > harvesting their data now that we have given them access to Praetorian. > I will be happy to compose the email if you want but please send me the > content as to what you would need similar to Defintel. If you are good > with sending the request, please feel free to do so. Thanks and have a > good night if I don't see you online. Let's hope we have some positive > response tomorrow so we can have a happy weekend! >=20 > My best to the family brother. >=20 > - --=20 > All the best, >=20 > Karim Hijazi > CEO | President > Unveillance, LLC > O. (404) 585-7487 > M. (561) 542-5704 > www.unveillance.com > khijazi@unveillance.com >=20 > ******************************************** > CONFIDENTIAL & PRIVILEGED COMMUNICATION This message is for the named > person's use only. The information contained in this communication is > confidential and/or privileged, proprietary information that is > transmitted solely for the purpose of the intended recipient(s). No > confidentiality or privilege is waived or lost by any mistransmission. > If you receive this message in error, please immediately delete it and > all copies of it from your system, destroy any hard copies of it and > notify the sender. You must not, directly or indirectly, use, disclose, > distribute, print, or copy any part of this message if you are not the > intended recipient. The sender or any of its subsidiaries each reserve > the right to monitor all e-mail communications through its networks. > ******************************************** > -----BEGIN PGP SIGNATURE----- > Version: GnuPG v1.4.10 (MingW32) >=20 > iQEcBAEBAgAGBQJMyhSCAAoJEIk0Dw4U/G3lONUH/RJ4QcRJy+IiWZsJlGRFr/zO > rcHbMUoD+3N3BlH35Estf2+NvvrknXBwYRiEinAErPPU4L4i70d+9AFaazgTn2Kn > 7mmlMZnOoUbWeKI1FOY+koWgunG9taAd5wpncECrBeIWZwZ2xh1fta7H6XXtbRa3 > HqgT4fD3OLfMoGDRlZvad3Tg3fAjvF4wPNu1fbu1R0KzUv8MNEEkyA9rpQ542hSO > de/kYpkh5YDe8HNFiA3x/wFxYOaOUTVhN3tOaNWXgr8HDl4kWiETVNuPuo4KWqKX > kpdJnDUsIBSa52wyTWBn13RWPXgCxOPc3V7zwW5VETSheJ1r4eUuO19DeTSWlZw=3D > =3DMrbo > -----END PGP SIGNATURE----- From - Sat May 21 19:28:33 2011 X-Mozilla-Status: 0001 X-Mozilla-Status2: 00000000 Delivered-To: khijazi@unveillance.com Received: by 10.14.119.13 with SMTP id m13cs134046eeh; Wed, 10 Nov 2010 17:13:43 -0800 (PST) Received: by 10.224.209.197 with SMTP id gh5mr222409qab.398.1289437712042; Wed, 10 Nov 2010 17:08:32 -0800 (PST) Received-SPF: neutral (google.com: 165.212.64.22 is neither permitted nor denied by best guess record for domain of unknown) client-ip=165.212.64.22; Received: by 10.241.83.225 with IMAP4 id 33mf191109qyl.70; Wed, 10 Nov 2010 17:08:32 -0800 (PST) X-Gmail-Fetch-Info: khijazi@unveillance.com@mail18.mydomainwebhost.com -1 mail18.mydomainwebhost.com 143 khijazi@unveillance.com Received: (qmail 19805 invoked from network); 29 Oct 2010 01:55:09 -0000 Received: from unknown (HELO gateout02.mbox.net) ([165.212.64.22]) by 66.11.233.58 with ESMTPS (DHE-RSA-AES256-SHA encrypted); 29 Oct 2010 01:55:09 -0000 Received-SPF: none (66.11.233.58: domain of jhunt@mitagroup.com does not designate permitted sender hosts) Received: from gateout02.mbox.net (gwo2-lo [127.0.0.1]) by gateout02.mbox.net (Postfix) with ESMTP id 450DA4BC80A for ; Fri, 29 Oct 2010 01:58:30 +0000 (GMT) X-USANET-Received: from gateout02.mbox.net [127.0.0.1] by gateout02.mbox.net via mtad (C8.MAIN.3.68Q) with ESMTP id 545oJCB7C9728Mo2; Fri, 29 Oct 2010 01:58:28 -0000 Received: from s1hub2.EXCHPROD.USA.NET [165.212.120.254] by gateout02.mbox.net via smtad (C8.MAIN.3.68M) with ESMTPS id XID749oJCB7C9316Xo2; Fri, 29 Oct 2010 01:58:28 -0000 X-USANET-Source: 165.212.120.254 IN jhunt@mitagroup.com s1hub2.EXCHPROD.USA.NET X-USANET-MsgId: XID749oJCB7C9316Xo2 Received: from MBX6.EXCHPROD.USA.NET ([10.120.221.61]) by s1hub2.EXCHPROD.USA.NET ([10.120.220.32]) with mapi; Fri, 29 Oct 2010 01:58:28 +0000 From: James Hunt To: Karim Hijazi Date: Fri, 29 Oct 2010 01:58:27 +0000 Subject: Are you alive? Thread-Topic: Are you alive? Thread-Index: Act3DMcoE8r6W1U5RtK1dU5F93MzPA== Message-ID: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: acceptlanguage: en-US Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Leaving Saturday at noon. Let me know if you can get back to me tomorrow w= ith a mark-up. jim From - Sat May 21 19:28:33 2011 X-Mozilla-Status: 0001 X-Mozilla-Status2: 00000000 Delivered-To: khijazi@unveillance.com Received: by 10.14.119.13 with SMTP id m13cs134049eeh; Wed, 10 Nov 2010 17:13:44 -0800 (PST) Received: by 10.224.177.6 with SMTP id bg6mr251549qab.120.1289437712210; Wed, 10 Nov 2010 17:08:32 -0800 (PST) Received-SPF: neutral (google.com: 128.111.41.14 is neither permitted nor denied by best guess record for domain of unknown) client-ip=128.111.41.14; Received: by 10.241.83.225 with IMAP4 id 33mf191109qyl.70; Wed, 10 Nov 2010 17:08:32 -0800 (PST) X-Gmail-Fetch-Info: khijazi@unveillance.com@mail18.mydomainwebhost.com -1 mail18.mydomainwebhost.com 143 khijazi@unveillance.com Received: (qmail 27851 invoked from network); 29 Oct 2010 02:07:12 -0000 Received: from unknown (HELO stamps.cs.ucsb.edu) ([128.111.41.14]) by 66.11.233.58 with ESMTPS (DHE-RSA-AES256-SHA encrypted); 29 Oct 2010 02:07:12 -0000 Received-SPF: none (66.11.233.58: domain of chris@cs.ucsb.edu does not designate permitted sender hosts) Received: from [10.0.154.58] ([206.205.54.73]) (authenticated bits=0) by stamps.cs.ucsb.edu (8.14.4/8.13.1) with ESMTP id o9T2AOOG015273 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=NO); Thu, 28 Oct 2010 19:10:26 -0700 Cc: Giovanni Vigna , khijazi@unveillance.com Message-Id: From: Christopher Kruegel To: "J. Tubbs" In-Reply-To: Content-Type: text/plain; charset=US-ASCII; format=flowed; delsp=yes Content-Transfer-Encoding: 7bit Mime-Version: 1.0 (Apple Message framework v936) Subject: Re: Tremendous conversation and a pleasure to meet you both Date: Thu, 28 Oct 2010 22:10:24 -0400 References: <4CC84FF4.9020602@unveillance.com> <4F861833-F4DA-48B3-AE9D-D8E6F9E02740@unveillance.com> <7CE73C1E-D5C5-4689-9801-2F67A33EDF12@cs.ucsb.edu> <4CC99855.10905@unveillance.com> <81BA88ED-F880-42D9-AB9D-B7F2C693CD8A@unveillance.com> <97EDE675-D7A3-430A-A4AD-FAEAA27F9A52@cs.ucsb.edu> X-Mailer: Apple Mail (2.936) X-Greylist: Sender succeeded SMTP AUTH, not delayed by milter-greylist-4.0a6 (stamps.cs.ucsb.edu [128.111.41.14]); Thu, 28 Oct 2010 19:10:26 -0700 (PDT) X-Virus-Scanned: clamav-milter 0.96.3 at stamps X-Virus-Status: Clean > Karim and I would still like to give you guys a proper demo after > you are settled from your present travels. definitely, looking forward to it. by then, we can also tell you about our view of UCSB and discuss which kind of data we can provide. > Regardless, feel free to use it as much as you wish until we can > meet up for a demo / walk-through. thanks again! christopher From - Sat May 21 19:28:33 2011 X-Mozilla-Status: 0001 X-Mozilla-Status2: 00000000 Delivered-To: khijazi@unveillance.com Received: by 10.14.119.13 with SMTP id m13cs135362eeh; Wed, 10 Nov 2010 17:30:02 -0800 (PST) Received: by 10.224.174.12 with SMTP id r12mr312817qaz.109.1289438795275; Wed, 10 Nov 2010 17:26:35 -0800 (PST) Received-SPF: softfail (google.com: best guess record for domain of transitioning unknown does not designate as permitted sender) Received: by 10.241.83.136 with IMAP4 id 8mf91335qyk.88; Wed, 10 Nov 2010 17:26:35 -0800 (PST) X-Gmail-Fetch-Info: khijazi@unveillance.com@mail18.mydomainwebhost.com -1 mail18.mydomainwebhost.com 143 khijazi@unveillance.com Message-ID: <4CC9C6EC.2000407@unveillance.com> Disposition-Notification-To: Karim Hijazi Unveillance Email Date: Thu, 28 Oct 2010 13:54:36 -0500 From: Karim Hijazi Unveillance Email Reply-To: khijazi@unveillance.com Organization: Unveillance, LLC User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.0; en-US; rv:1.9.2.11) Gecko/20101013 Lightning/1.0b2 Thunderbird/3.1.5 MIME-Version: 1.0 To: jason.lewkowicz@accenture.com Subject: Re: Quick Update References: <4CC9B223.10202@unveillance.com> <84D3F8542F6A784DAFC83BDFF277E83E481D652524@USAXM3111.dir.svc.accenture.com> In-Reply-To: <84D3F8542F6A784DAFC83BDFF277E83E481D652524@USAXM3111.dir.svc.accenture.com> X-Enigmail-Version: 1.1.1 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Thanks Jason, Looking forward to hearing from you. KH On 10/28/2010 1:52 PM, jason.lewkowicz@accenture.com wrote: > Nothing at this time. Just been slammed with a project that came up last minute. Will review and come back with comments if I have any today. > > ______________________________________ > Jason Lewkowicz; EnCE, CISSP, CISM > > Global CIRT / ISIRT Manager > IT Risk > Accenture > > Office: +1.312.693.0169 > US Mobile: +1.847.344.6875 > jason.lewkowicz@accenture.com > > Chicago, 161 N. Clark St > > > -----Original Message----- > From: Karim Hijazi Unveillance Email [mailto:khijazi@unveillance.com] > Sent: Thursday, October 28, 2010 12:26 PM > To: Lewkowicz, Jason > Subject: Quick Update > > Hello Jason, > > Just checking in to see if you had any questions or comments regarding > our proposals sent a few days ago. Thanks. > This message is for the designated recipient only and may contain privileged, proprietary, or otherwise private information. If you have received it in error, please notify the sender immediately and delete the original. Any other use of the email by you is prohibited. - ----- No virus found in this message. Checked by AVG - www.avg.com Version: 10.0.1153 / Virus Database: 424/3224 - Release Date: 10/28/10 - -- All the best, Karim Hijazi CEO | President Unveillance, LLC O. (404) 585-7487 M. (561) 542-5704 www.unveillance.com khijazi@unveillance.com ******************************************** CONFIDENTIAL & PRIVILEGED COMMUNICATION This message is for the named person's use only. The information contained in this communication is confidential and/or privileged, proprietary information that is transmitted solely for the purpose of the intended recipient(s). No confidentiality or privilege is waived or lost by any mistransmission. If you receive this message in error, please immediately delete it and all copies of it from your system, destroy any hard copies of it and notify the sender. You must not, directly or indirectly, use, disclose, distribute, print, or copy any part of this message if you are not the intended recipient. The sender or any of its subsidiaries each reserve the right to monitor all e-mail communications through its networks. ******************************************** -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (MingW32) iQEcBAEBAgAGBQJMycbsAAoJEIk0Dw4U/G3lMUkIANqT7AlAq14DqDDwNGv7k1NP fwcQqMDXaww9BnL8blK6usiDlGURtdZewEOnZFH3RXSg+VHa8RcgnLwLVt9pADny ydzRnjRqHk2ORfbhE8FucGcF9271XMiVg7kiTwyoDpC4S4SDE9x8sTe+IYNpkKFk O8wngS1rNBNs6VVkeRZAteKFXcCHOxUiubP4C5Zx3nWvV7A59xH8ojvEbcAiBXvd jADC7fGa6zyo83I0A6+K1dakvrB9U/gmsf5RsvvAkn1o+BWuhKl/UEakL6gPvrte h6BFGdLBCCiMid9XgrVAzo8nFtZ2D5szh22rFfuY9xpRn00vcPWG6mMBImep4lM= =mFNk -----END PGP SIGNATURE----- From - Sat May 21 19:28:33 2011 X-Mozilla-Status: 0001 X-Mozilla-Status2: 00000000 Delivered-To: khijazi@unveillance.com Received: by 10.14.119.13 with SMTP id m13cs135363eeh; Wed, 10 Nov 2010 17:30:02 -0800 (PST) Received: by 10.224.189.76 with SMTP id dd12mr260406qab.235.1289438795434; Wed, 10 Nov 2010 17:26:35 -0800 (PST) Received-SPF: softfail (google.com: best guess record for domain of transitioning unknown does not designate as permitted sender) Received: by 10.241.83.136 with IMAP4 id 8mf91335qyk.88; Wed, 10 Nov 2010 17:26:35 -0800 (PST) X-Gmail-Fetch-Info: khijazi@unveillance.com@mail18.mydomainwebhost.com -1 mail18.mydomainwebhost.com 143 khijazi@unveillance.com Message-ID: <4CC9C74C.6050603@unveillance.com> Disposition-Notification-To: Karim Hijazi Unveillance Email Date: Thu, 28 Oct 2010 13:56:12 -0500 From: Karim Hijazi Unveillance Email Reply-To: khijazi@unveillance.com Organization: Unveillance, LLC User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.0; en-US; rv:1.9.2.11) Gecko/20101013 Lightning/1.0b2 Thunderbird/3.1.5 MIME-Version: 1.0 To: Owen Greeson Subject: Re: Are You Aware Of This? References: <4CC9B2E8.7090208@comcast.net> In-Reply-To: <4CC9B2E8.7090208@comcast.net> X-Enigmail-Version: 1.1.1 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hello Owen, Good speaking with you today. Looks like the market is heating up! I mentioned that we have built a client watch list facility that allows you to see a group of highlighted firms at login. Can you send me a list of 8 to 10 firms you would have an interest in seeing or monitoring? I know that Jerry mentioned adding some of those Finnish firms you had requested adding a while back. Let me know and I will get you set up. Thanks again Owen. KH On 10/28/2010 12:29 PM, Owen Greeson wrote: > http://www.marketwire.com/press-release/Endgame-Systems-Raises-29M-Launches-ipTrust-Industrys-First-Cloud-Based-Botnet-Malware-1342844.htm > > > - -- All the best, Karim Hijazi CEO | President Unveillance, LLC O. (404) 585-7487 M. (561) 542-5704 www.unveillance.com khijazi@unveillance.com ******************************************** CONFIDENTIAL & PRIVILEGED COMMUNICATION This message is for the named person's use only. The information contained in this communication is confidential and/or privileged, proprietary information that is transmitted solely for the purpose of the intended recipient(s). No confidentiality or privilege is waived or lost by any mistransmission. If you receive this message in error, please immediately delete it and all copies of it from your system, destroy any hard copies of it and notify the sender. You must not, directly or indirectly, use, disclose, distribute, print, or copy any part of this message if you are not the intended recipient. The sender or any of its subsidiaries each reserve the right to monitor all e-mail communications through its networks. ******************************************** -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (MingW32) iQEcBAEBAgAGBQJMycdMAAoJEIk0Dw4U/G3lfN4H/jwpxvLh29lGI9BgWO3UHOBh vELc7FLvsraD1znxmKRVm1vWW6HPEPSDJ7VCzi2dSSSsQa40H4Jlt3YnManooo6f t1Rc5T0RfA56RP9ZyMUd/35ahkyB+85MSBGK509TwdRm2TGTUfE0Vz/rijP+Oll5 35faHhfHybKwGye8ztJtNM17ZJlrmIWjPeWJQsRiPb0N46kqM4mCxZ6aSuWtTWYW ORFamjaA0n6C8O01JZvmptsp4Tr323HG2/uCDaguCsZsgQGHUHWJs/gQ++lCg74D CvOoucAl41w1fPHigPtDFaaHG0e8zk+5hrFltF7xlcTj+9b7W6vxx7kqdyxLPJk= =WZQm -----END PGP SIGNATURE-----