From - Sat May 21 19:28:36 2011 X-Mozilla-Status: 0001 X-Mozilla-Status2: 00000000 Delivered-To: khijazi@unveillance.com Received: by 10.14.119.13 with SMTP id m13cs133957eeh; Wed, 10 Nov 2010 17:12:44 -0800 (PST) Received: by 10.224.209.137 with SMTP id gg9mr193806qab.399.1289437701418; Wed, 10 Nov 2010 17:08:21 -0800 (PST) Received-SPF: neutral (google.com: 165.212.64.22 is neither permitted nor denied by best guess record for domain of unknown) client-ip=165.212.64.22; Received: by 10.241.83.225 with IMAP4 id 33mf191109qyl.70; Wed, 10 Nov 2010 17:08:21 -0800 (PST) X-Gmail-Fetch-Info: khijazi@unveillance.com@mail18.mydomainwebhost.com -1 mail18.mydomainwebhost.com 143 khijazi@unveillance.com X-Spam-Checker-Version: SpamAssassin 3.2.5 (2008-06-10) on spam1.pem.inap.sea.dotster.net X-Spam-Level: X-Spam-Status: No, score=0.1 required=3.5 tests=HTML_MESSAGE,MIME_HTML_MOSTLY, RDNS_NONE autolearn=no version=3.2.5 Received: (qmail 9471 invoked from network); 25 Oct 2010 19:16:00 -0000 Received: from unknown (HELO gateout02.mbox.net) ([165.212.64.22]) by 66.11.233.58 with ESMTPS (DHE-RSA-AES256-SHA encrypted); 25 Oct 2010 19:16:00 -0000 Received-SPF: none (66.11.233.58: domain of jhunt@mitagroup.com does not designate permitted sender hosts) Received: from gateout02.mbox.net (gwo2-lo [127.0.0.1]) by gateout02.mbox.net (Postfix) with ESMTP id C0ACA4BEEF7 for ; Mon, 25 Oct 2010 19:18:40 +0000 (GMT) X-USANET-Received: from gateout02.mbox.net [127.0.0.1] by gateout02.mbox.net via mtad (C8.MAIN.3.68Q) with ESMTP id 597oJyTsM6528Mo2; Mon, 25 Oct 2010 19:18:38 -0000 Received: from s1hub1.EXCHPROD.USA.NET [165.212.120.254] by gateout02.mbox.net via smtad (C8.MAIN.3.68M) with ESMTPS id XID907oJyTsM1649Xo2; Mon, 25 Oct 2010 19:18:38 -0000 X-USANET-Source: 165.212.120.254 IN jhunt@mitagroup.com s1hub1.EXCHPROD.USA.NET X-USANET-MsgId: XID907oJyTsM1649Xo2 Received: from MBX6.EXCHPROD.USA.NET ([10.120.221.61]) by s1hub1.EXCHPROD.USA.NET ([10.120.220.31]) with mapi; Mon, 25 Oct 2010 19:18:29 +0000 From: James Hunt To: Karim Hijazi Unveillance Email Date: Mon, 25 Oct 2010 19:18:28 +0000 Subject: Read: thoughts on the draft? Thread-Topic: thoughts on the draft? Thread-Index: Act0bZE/rd+Va+lMSDeAurFwabU6dQAC9ZOG Message-ID: In-Reply-To: <4CC5C41A.7020809@unveillance.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-Auto-Response-Suppress: All X-MS-TNEF-Correlator: acceptlanguage: en-US Content-Type: multipart/report; boundary="_000_B41C53427D44E140AFB94BCBDEE1781A0909FDBD9FMBX6EXCHPRODU_"; report-type=disposition-notification MIME-Version: 1.0 --_000_B41C53427D44E140AFB94BCBDEE1781A0909FDBD9FMBX6EXCHPRODU_ Content-Type: multipart/alternative; boundary="_002_B41C53427D44E140AFB94BCBDEE1781A0909FDBD9FMBX6EXCHPRODU_" --_002_B41C53427D44E140AFB94BCBDEE1781A0909FDBD9FMBX6EXCHPRODU_ Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Your message was read on Monday, October 25, 2010 7:18:28 PM (GMT) Coordina= ted Universal Time. --_002_B41C53427D44E140AFB94BCBDEE1781A0909FDBD9FMBX6EXCHPRODU_ Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable
Your message was read on Monday, = October 25, 2010 7:18:28 PM (GMT) Coordinated Universal Time.
--_002_B41C53427D44E140AFB94BCBDEE1781A0909FDBD9FMBX6EXCHPRODU_-- --_000_B41C53427D44E140AFB94BCBDEE1781A0909FDBD9FMBX6EXCHPRODU_ Content-Type: message/disposition-notification Final-recipient: RFC822; jhunt@mitagroup.com Disposition: automatic-action/MDN-sent-automatically; displayed X-MSExch-Correlation-Key: GcfUWDQ7S0Ke2/kD9ujmdw== X-Display-Name: James Hunt --_000_B41C53427D44E140AFB94BCBDEE1781A0909FDBD9FMBX6EXCHPRODU_-- From - Sat May 21 19:28:36 2011 X-Mozilla-Status: 0001 X-Mozilla-Status2: 00000000 Delivered-To: khijazi@unveillance.com Received: by 10.14.119.13 with SMTP id m13cs133958eeh; Wed, 10 Nov 2010 17:12:45 -0800 (PST) Received: by 10.224.207.9 with SMTP id fw9mr233625qab.201.1289437701580; Wed, 10 Nov 2010 17:08:21 -0800 (PST) Received-SPF: neutral (google.com: 165.212.64.21 is neither permitted nor denied by best guess record for domain of unknown) client-ip=165.212.64.21; Received: by 10.241.83.225 with IMAP4 id 33mf191109qyl.70; Wed, 10 Nov 2010 17:08:21 -0800 (PST) X-Gmail-Fetch-Info: khijazi@unveillance.com@mail18.mydomainwebhost.com -1 mail18.mydomainwebhost.com 143 khijazi@unveillance.com X-Spam-Checker-Version: SpamAssassin 3.2.5 (2008-06-10) on spam1.pem.inap.sea.dotster.net X-Spam-Level: X-Spam-Status: No, score=0.1 required=3.5 tests=RDNS_NONE autolearn=no version=3.2.5 Received: (qmail 11831 invoked from network); 25 Oct 2010 19:16:17 -0000 Received: from unknown (HELO gateout01.mbox.net) ([165.212.64.21]) by 66.11.233.58 with ESMTPS (DHE-RSA-AES256-SHA encrypted); 25 Oct 2010 19:16:17 -0000 Received-SPF: none (66.11.233.58: domain of jhunt@mitagroup.com does not designate permitted sender hosts) Received: from gateout01.mbox.net (gateout01-lo [127.0.0.1]) by gateout01.mbox.net (Postfix) with ESMTP id 9AF1FCE826 for ; Mon, 25 Oct 2010 19:18:57 +0000 (GMT) X-USANET-Received: from gateout01.mbox.net [127.0.0.1] by gateout01.mbox.net via mtad (C8.MAIN.3.68Q) with ESMTP id 781oJyTs54528Mo1; Mon, 25 Oct 2010 19:18:56 -0000 Received: from s1hub1.EXCHPROD.USA.NET [165.212.120.254] by gateout01.mbox.net via smtad (C8.MAIN.3.68M) with ESMTPS id XID320oJyTs57072Xo1; Mon, 25 Oct 2010 19:18:56 -0000 X-USANET-Source: 165.212.120.254 IN jhunt@mitagroup.com s1hub1.EXCHPROD.USA.NET X-USANET-MsgId: XID320oJyTs57072Xo1 Received: from MBX6.EXCHPROD.USA.NET ([10.120.221.61]) by s1hub1.EXCHPROD.USA.NET ([10.120.220.31]) with mapi; Mon, 25 Oct 2010 19:18:40 +0000 From: James Hunt To: "khijazi@unveillance.com" Date: Mon, 25 Oct 2010 19:18:40 +0000 Subject: RE: thoughts on the draft? Thread-Topic: thoughts on the draft? Thread-Index: Act0bZE/rd+Va+lMSDeAurFwabU6dQAC9tAA Message-ID: References: <4CC26752.8070403@unveillance.com> <4CC5C41A.7020809@unveillance.com> In-Reply-To: <4CC5C41A.7020809@unveillance.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: acceptlanguage: en-US Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 4:30? Jim Hunt, Managing Partner MITA Group, Inc. 703/338-6414 - cell 703/903-0201 - fax -----Original Message----- From: Karim Hijazi Unveillance Email [mailto:khijazi@unveillance.com]=20 Sent: Monday, October 25, 2010 1:54 PM To: James Hunt Subject: Re: thoughts on the draft? -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Jim, That is some great intel. Are you up for a call today? KH On 10/25/2010 12:52 PM, James Hunt wrote: > Karim, >=20 > A couple interesting points. EG got $29M from Bessemer, Kleiner and Colu= mbia Capital. That is a manly number.... >=20 > Second, I now know the group and probably the technical lead for their co= ntract with the IC. They are well placed but we can make some dents. >=20 > Look forward to your response. >=20 > Jim >=20 > P.S. Chris doesn't have a clearance and I guess at least some folks think= he can't/won't get one. >=20 > Jim Hunt, Managing Partner > MITA Group, Inc. > 703/338-6414 - cell > 703/903-0201 - fax >=20 > -----Original Message----- > From: Karim Hijazi Unveillance Email [mailto:khijazi@unveillance.com]=20 > Sent: Saturday, October 23, 2010 12:41 AM > To: James Hunt > Subject: Re: thoughts on the draft? >=20 > Jim, >=20 > My turn to apologize for the delay. I have forwarded the draft to > Patrick for review and I am waiting for his comments. >=20 > I too have been bogged down in a commercial deal with Unveillance. > Can't complain - it is revenue! >=20 > I look forward to speaking with you soon. >=20 > Thanks, >=20 > Karim >=20 > On 10/21/2010 4:13 PM, James Hunt wrote: >=20 >=20 >> Jim Hunt, Managing Partner >> MITA Group, Inc. >> 703/338-6414 - cell >> 703/903-0201 - fax >=20 >=20 >=20 >=20 >> ----- >> No virus found in this message. >> Checked by AVG - www.avg.com >> Version: 10.0.1136 / Virus Database: 422/3210 - Release Date: 10/21/10 >=20 >=20 - ----- No virus found in this message. Checked by AVG - www.avg.com Version: 10.0.1144 / Virus Database: 422/3217 - Release Date: 10/24/10 - --=20 All the best, Karim Hijazi CEO | President Unveillance, LLC O. (404) 585-7487 M. (561) 542-5704 www.unveillance.com khijazi@unveillance.com ******************************************** CONFIDENTIAL & PRIVILEGED COMMUNICATION This message is for the named person's use only. The information contained in this communication is confidential and/or privileged, proprietary information that is transmitted solely for the purpose of the intended recipient(s). No confidentiality or privilege is waived or lost by any mistransmission. If you receive this message in error, please immediately delete it and all copies of it from your system, destroy any hard copies of it and notify the sender. You must not, directly or indirectly, use, disclose, distribute, print, or copy any part of this message if you are not the intended recipient. The sender or any of its subsidiaries each reserve the right to monitor all e-mail communications through its networks. ******************************************** -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (MingW32) iQEcBAEBAgAGBQJMxcQaAAoJEIk0Dw4U/G3l55QH/jU90pidMiWJnUwQBiIUSSZN QMzipmsd82fdLMXhzwGXw60dT0Ph2uDieKSGL2T8R0P8D+GSZMeiANePTJ86hB1b Qzju85rPjbZBIH9qJ+TiHSU25yuFRAyDsIHNNUENtqV/ezqcmGGJ95OmOIFZQYb6 q+XWnFkUuhJgfp1WOAMvqozcXiNoU1HoywA+Z6uwEFJnPpi1dYJMMRYwgr2coXMg N0eGK0uuYkUnI9v3TT+MVTSmMGuuo/vnnMBBa1FOPLnb5RX5uQHRVJv36rN7CvpI zoN5AlsoNMthuT/R2F2i6WXCeCWWJgBRtx3qqT9MFu21cWBv/rBrhas9YB6VHe4=3D =3DvUCA -----END PGP SIGNATURE----- From - Sat May 21 19:28:36 2011 X-Mozilla-Status: 0001 X-Mozilla-Status2: 00000000 Delivered-To: khijazi@unveillance.com Received: by 10.14.119.13 with SMTP id m13cs133960eeh; Wed, 10 Nov 2010 17:12:47 -0800 (PST) Received: by 10.224.89.11 with SMTP id c11mr246702qam.207.1289437702053; Wed, 10 Nov 2010 17:08:22 -0800 (PST) Received-SPF: neutral (google.com: 64.12.206.42 is neither permitted nor denied by best guess record for domain of unknown) client-ip=64.12.206.42; Received: by 10.241.83.225 with IMAP4 id 33mf191109qyl.70; Wed, 10 Nov 2010 17:08:22 -0800 (PST) X-Gmail-Fetch-Info: khijazi@unveillance.com@mail18.mydomainwebhost.com -1 mail18.mydomainwebhost.com 143 khijazi@unveillance.com X-Spam-Checker-Version: SpamAssassin 3.2.5 (2008-06-10) on spam1.pem.inap.sea.dotster.net X-Spam-Level: X-Spam-Status: No, score=0.1 required=3.5 tests=HTML_MESSAGE,RDNS_NONE autolearn=no version=3.2.5 Received: (qmail 18249 invoked from network); 25 Oct 2010 21:52:42 -0000 Received: from unknown (HELO imr-ma04.mx.aol.com) ([64.12.206.42]) by 66.11.233.58 with SMTP; 25 Oct 2010 21:52:42 -0000 Received-SPF: pass (66.11.233.58: domain of BMHDMH@aol.com designates 64.12.206.42 as permitted sender) receiver=66.11.233.58; client_ip=64.12.206.42; envelope-from=BMHDMH@aol.com; Received: from imo-da04.mx.aol.com (imo-da04.mx.aol.com [205.188.169.202]) by imr-ma04.mx.aol.com (8.14.1/8.14.1) with ESMTP id o9PLtFP9010912 for ; Mon, 25 Oct 2010 17:55:16 -0400 Received: from BMHDMH@aol.com by imo-da04.mx.aol.com (mail_out_v42.9.) id g.ea0.952b759 (43833) for ; Mon, 25 Oct 2010 17:55:13 -0400 (EDT) Received: from smtprly-mc02.mx.aol.com (smtprly-mc02.mx.aol.com [64.12.95.98]) by cia-dc02.mx.aol.com (v129.5) with ESMTP id MAILCIADC026-d3d44cc5fcbb1e7; Mon, 25 Oct 2010 17:55:13 -0400 Received: from webmail-m052 (webmail-m052.sim.aol.com [64.12.140.162]) by smtprly-mc02.mx.aol.com (v129.4) with ESMTP id MAILSMTPRLYMC026-d3d44cc5fcbb1e7; Mon, 25 Oct 2010 17:55:07 -0400 To: khijazi@unveillance.com Subject: Damballa Date: Mon, 25 Oct 2010 17:55:06 -0400 X-MB-Message-Source: WebUI X-AOL-IP: 24.147.154.211 X-MB-Message-Type: User MIME-Version: 1.0 From: bmhdmh@aol.com Content-Type: multipart/alternative; boundary="--------MB_8CD42A66BD154A9_4AC_3CB6_webmail-m052.sysops.aol.com" X-Mailer: AOL Webmail 32823-STANDARD Received: from 24.147.154.211 by webmail-m052.sysops.aol.com (64.12.140.162) with HTTP (WebMailUI); Mon, 25 Oct 2010 17:55:06 -0400 Message-Id: <8CD42A66BCEF348-4AC-18B7@webmail-m052.sysops.aol.com> X-AOL-SENDER: BMHDMH@aol.com ----------MB_8CD42A66BD154A9_4AC_3CB6_webmail-m052.sysops.aol.com Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset="us-ascii" Karim - In reviewing the background of this Company, I read a lot of "familiar" na= mes of people that you have been dealing with for better or worse. What do= you think of their product? Versus our Product? What does theirs Cost? Ta= lk to you soon, My Friend. ----------MB_8CD42A66BD154A9_4AC_3CB6_webmail-m052.sysops.aol.com Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset="us-ascii" Karim -

In revie= wing the background of this Company, I read a lot of "familiar" names of= people that you have been dealing with for better or worse. What do you= think of their product? Versus our Product? What does theirs Cost? Talk= to you soon, My Friend.

----------MB_8CD42A66BD154A9_4AC_3CB6_webmail-m052.sysops.aol.com-- From - Sat May 21 19:28:36 2011 X-Mozilla-Status: 0001 X-Mozilla-Status2: 00000000 Delivered-To: khijazi@unveillance.com Received: by 10.14.119.13 with SMTP id m13cs133963eeh; Wed, 10 Nov 2010 17:12:49 -0800 (PST) Received: by 10.224.200.135 with SMTP id ew7mr232769qab.210.1289437702436; Wed, 10 Nov 2010 17:08:22 -0800 (PST) Received-SPF: neutral (google.com: 205.188.105.147 is neither permitted nor denied by best guess record for domain of unknown) client-ip=205.188.105.147; Received: by 10.241.83.225 with IMAP4 id 33mf191109qyl.70; Wed, 10 Nov 2010 17:08:22 -0800 (PST) X-Gmail-Fetch-Info: khijazi@unveillance.com@mail18.mydomainwebhost.com -1 mail18.mydomainwebhost.com 143 khijazi@unveillance.com X-Spam-Checker-Version: SpamAssassin 3.2.5 (2008-06-10) on spam1.pem.inap.sea.dotster.net X-Spam-Level: X-Spam-Status: No, score=0.1 required=3.5 tests=HTML_MESSAGE,RDNS_NONE autolearn=no version=3.2.5 Received: (qmail 1507 invoked from network); 26 Oct 2010 01:32:41 -0000 Received: from unknown (HELO imr-da05.mx.aol.com) ([205.188.105.147]) by 66.11.233.58 with SMTP; 26 Oct 2010 01:32:41 -0000 Received-SPF: pass (66.11.233.58: domain of BMHDMH@aol.com designates 205.188.105.147 as permitted sender) receiver=66.11.233.58; client_ip=205.188.105.147; envelope-from=BMHDMH@aol.com; Received: from imo-da03.mx.aol.com (imo-da03.mx.aol.com [205.188.169.201]) by imr-da05.mx.aol.com (8.14.1/8.14.1) with ESMTP id o9Q1ZKIh003091; Mon, 25 Oct 2010 21:35:20 -0400 Received: from BMHDMH@aol.com by imo-da03.mx.aol.com (mail_out_v42.9.) id a.dba.1157559f (37583) for ; Mon, 25 Oct 2010 21:35:14 -0400 (EDT) Received: from smtprly-db01.mx.aol.com (smtprly-db01.mx.aol.com [205.188.249.152]) by cia-mb05.mx.aol.com (v129.5) with ESMTP id MAILCIAMB058-5bc94cc6304a399; Mon, 25 Oct 2010 21:35:12 -0400 Received: from webmail-m052 (webmail-m052.sim.aol.com [64.12.140.162]) by smtprly-db01.mx.aol.com (v129.4) with ESMTP id MAILSMTPRLYDB018-5bc94cc6304a399; Mon, 25 Oct 2010 21:35:06 -0400 References: <8CD4299F0D18971-4AC-396@webmail-m052.sysops.aol.com> <50D580A0-040A-4E45-B0FE-3D48A03B44A9@dennisdevlin.com> To: dennis@dennisdevlin.com Subject: Re: Unveillance Software Overview Date: Mon, 25 Oct 2010 21:35:06 -0400 X-AOL-IP: 24.147.154.211 In-Reply-To: <50D580A0-040A-4E45-B0FE-3D48A03B44A9@dennisdevlin.com> X-MB-Message-Source: WebUI MIME-Version: 1.0 From: bmhdmh@aol.com X-MB-Message-Type: User Content-Type: multipart/alternative; boundary="--------MB_8CD42C52775A298_4AC_ACC5_webmail-m052.sysops.aol.com" X-Mailer: AOL Webmail 32823-STANDARD Received: from 24.147.154.211 by webmail-m052.sysops.aol.com (64.12.140.162) with HTTP (WebMailUI); Mon, 25 Oct 2010 21:35:06 -0400 Message-Id: <8CD42C52769BBB3-4AC-4750@webmail-m052.sysops.aol.com> X-AOL-SENDER: BMHDMH@aol.com ----------MB_8CD42C52775A298_4AC_ACC5_webmail-m052.sysops.aol.com Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset="us-ascii" Dennis - I did some research on Damballa as well as talking with the Unveillance fo= lks. You are correct in terms of there are some similarities but there som= e very large differences both in how the products actually function and wh= ere they reside. Bottom line is that they should probably someday be compl= imentary products in a Company's network but who knows !!! Thanks again and you are absolutely right.....Life is Good !!! Best Regards, Bruce -----Original Message----- From: Dennis Devlin To: bmhdmh@aol.com Sent: Mon, Oct 25, 2010 4:53 pm Subject: Re: Unveillance Software Overview Thanks, Bruce. I always enjoy our conversations and congratulations on yo= ur new grandchildren, especially Jenny's new son. Despite the challenges= life is good. =20 I will be happy to take a look at this product. It sounds a lot like anot= her product called Damballa that I looked at briefly earlier this year. = I will give you my impressions when I have a free moment to look at what= you sent. =20 Best regards, Dennis =20 Dennis Devlin Chief Information Security Officer Brandeis University ddevlin@brandeis.edu (781)736-4560 Office (978)239-0189 Mobile Brandeis will NEVER ask you for your password via e-mail. Do NOT reply to or click on any links in a suspicious e-mail. Please forward suspicious e-mail to security@brandeis.edu. On Oct 25, 2010, at 4:25 PM, bmhdmh@aol.com wrote: Dennis - Thanks for your continued interest in my job pursuits and in your efforts= to help me. It is still a tough place out there. I will also keep you pos= ted on my discussions with Chris. But far more important is our "job" as= Grandfathers. It is a lot more fun and I'm sure we both enjoy spending as= much time as possible with them !!! Also, please accept my congratulation= s on another one arriving in February and I'll be sure to pass along your= best wishes to Jenny and her new little man. =20 As I mentioned to you, I have been working with the principal of organizat= ion that has extensive experience and background in the security community= as well as the intelligence community. For the past two years he has bee= n working to develop a software product that will identify malware and bot= nets (as they go active) within an organization on a near real time basis= without any on premises hardware or software based products.This software= system that had been developed for the Government and is now just startin= g to be reviewed for its value in the commercial environment. =20 Quite frankly, we have reviewed this product with a number of Global corpo= rations, SMB's, International clients and a variety of other commercial cl= ients. Without being the least biased, their feedback has all been very po= sitive and all of these firms are now in various stages of arranging to pi= lot this SaaS based system. =20 Subsequent to your review of the PowerPoint which I recognize is limited= for someone with your background, the principal of Unveillance, Karim Hij= azi and I would be more than willing to provide you (as well as any others= ) with more technical specifics of the system as well as a demo of how the= product works and the current opportunities being pursued within the mark= etplace. This online presentation can be arranged very quickly through GoT= oMeeting or WebEx. =20 Dennis, I again thank you for taking the time to review this product and= certainly appreciate your feedback and support on my behalf.=20 =20 Best Regards, Bruce =3D =20 ----------MB_8CD42C52775A298_4AC_ACC5_webmail-m052.sysops.aol.com Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset="us-ascii" Dennis -

I did so= me research on Damballa as well as talking with the Unveillance folks. You= are correct in terms of there are some similarities but there some very= large differences both in how the products actually function and where th= ey reside. Bottom line is that they should probably someday be complimenta= ry products in a Company's network but who knows !!!

Thanks= again and you are absolutely right.....Life is Good !!!

Best Reg= ards,
Bruce




----= -Original Message-----
From: Dennis Devlin <dennis@dennisdevlin.com>
To: bmhdmh@aol.com <bmhdmh@aol.com>
Sent: Mon, Oct 25, 2010 4:53 pm
Subject: Re: Unveillance Software Overview

Thanks, Bruce.  I always enjoy our conversations and congratulat= ions on your new grandchildren, especially Jenny's new son.  Despite= the challenges life is good.  

I will be happy to take a look at this product.  It sounds a lot= like another product called Damballa that I looked at briefly earlier thi= s year.  I will give you my impressions when I have a free moment to= look at what you sent.  

Best regards,
Dennis   

Dennis Devlin
Chief Information Security Officer
Brandeis University
ddevlin@brandeis.edu
(781)736-4560 Office
(978)239-0189 Mobile

Brandeis will NEVER ask you for your password via e-mail.
Do NOT reply to or click on any links in a suspicious e-mail.
Please forward suspicious e-mail to security@brandeis.edu.

On Oct 25, 2010, at 4:25 PM, bmhdmh@aol.= com wrote:

<= font class=3D"Apple-style-span" face=3D"Arial">Dennis -

Thanks for your continued interest in my job pu= rsuits and in your efforts to help me. It is still a tough place out there= . I will also keep you posted on my discussions with Chris. But far more= important is our "job" as Grandfathers. It is a lot more fun and I'm= sure we both enjoy spending as much time as possible with them !!!= Also, please accept my congratulations on another one arriving in Fe= bruary and I'll be sure to pass along your best wishes to Jenny and her ne= w little man.
 
As I mentioned to yo= u, I have been working with the principal of organization that has extensi= ve experience and background in the security community as well as the inte= lligence community.  For the past two years he has been working to de= velop a software product that will identify malware and botnets (as they= go active) within an organization on a near real time basis without any= on premises hardware or software based products.This software system= that had been developed for the Government and is now just starting to be= reviewed for its value in the commercial environment.
 =
Quite frankly, we ha= ve reviewed this product with a number of Global corporations, SMB's, Inte= rnational clients and a variety of other commercial clients. Without= being the least biased, their feedback has all been very positive and all= of these firms are now in various stages of arranging to pilot this= SaaS based system.
 =
Subsequent to your= review of the PowerPoint which I recognize is limited for someone with yo= ur background, the principal of Unveillance, Karim Hijazi and I would be= more than willing to provide you (as well as any otherswith more technical specifics= of the system as well as a demo of how the product works and the current= opportunities being pursued within the marketplace. This online presentat= ion can be arranged very quickly through GoToMeeting or WebEx.
 =
Dennis, I again thank you for taking= the time to review this product and certainly appreciate your feedback an= d support on my behalf. 
 =
Best Regards,=
Bruce<= /div>


<unveillanceoverview-10-1.pdf>
<Brandeis-University---Unveillance-Report.png>
=3D
----------MB_8CD42C52775A298_4AC_ACC5_webmail-m052.sysops.aol.com-- From - Sat May 21 19:28:36 2011 X-Mozilla-Status: 0001 X-Mozilla-Status2: 00000000 Delivered-To: khijazi@unveillance.com Received: by 10.14.119.13 with SMTP id m13cs135320eeh; Wed, 10 Nov 2010 17:29:28 -0800 (PST) Received: by 10.224.135.232 with SMTP id o40mr244278qat.392.1289438631667; Wed, 10 Nov 2010 17:23:51 -0800 (PST) Received-SPF: softfail (google.com: best guess record for domain of transitioning unknown does not designate as permitted sender) Received: by 10.241.194.198 with IMAP4 id 6mf119923qwh.94; Wed, 10 Nov 2010 17:23:51 -0800 (PST) X-Gmail-Fetch-Info: khijazi@unveillance.com@mail18.mydomainwebhost.com -1 mail18.mydomainwebhost.com 143 khijazi@unveillance.com Message-ID: <4CC5C904.1060609@unveillance.com> Disposition-Notification-To: Karim Hijazi Unveillance Email Date: Mon, 25 Oct 2010 13:14:28 -0500 From: Karim Hijazi Unveillance Email Reply-To: khijazi@unveillance.com Organization: Unveillance, LLC User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.0; en-US; rv:1.9.2.11) Gecko/20101013 Lightning/1.0b2 Thunderbird/3.1.5 MIME-Version: 1.0 To: Christopher Kruegel CC: Giovanni Vigna Subject: Re: Introductions References: <20101023185012.GA19585@sudo.sh> <4CC33FB2.3030107@unveillance.com> <4CC5BF6F.9020507@unveillance.com> <043DC20F-836F-412E-BFC4-445607718C40@tllod.com> <0F5B1FD4-0817-47AF-8856-74DDB5406A67@cs.ucsb.edu> <4CC5C3A5.9050309@unveillance.com> <55569F0B-679A-478C-9820-9AA014A36FFF@tllod.com> In-Reply-To: <55569F0B-679A-478C-9820-9AA014A36FFF@tllod.com> X-Enigmail-Version: 1.1.1 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Just in case my calendaring tool did not send: 1. Please join my meeting, Tuesday, October 26 at 7:00 PM Central Daylight Time. https://www2.gotomeeting.com/join/347075803 2. Use your microphone and speakers (VoIP) - a headset is recommended. Or, call in using your telephone. Dial +1 213 289 0010 Access Code: 347-075-803 Audio PIN: Shown after joining the meeting Meeting ID: 347-075-803 On 10/25/2010 12:55 PM, Christopher Kruegel wrote: >> 5pm works. Everyone okay with that time? I can set up conference call >> capabilities once we settle on a time. > > sure, 5pm also works for me. > > christopher > > > ----- > No virus found in this message. > Checked by AVG - www.avg.com > Version: 10.0.1144 / Virus Database: 422/3217 - Release Date: 10/24/10 - -- All the best, Karim Hijazi CEO | President Unveillance, LLC O. (404) 585-7487 M. (561) 542-5704 www.unveillance.com khijazi@unveillance.com ******************************************** CONFIDENTIAL & PRIVILEGED COMMUNICATION This message is for the named person's use only. The information contained in this communication is confidential and/or privileged, proprietary information that is transmitted solely for the purpose of the intended recipient(s). No confidentiality or privilege is waived or lost by any mistransmission. If you receive this message in error, please immediately delete it and all copies of it from your system, destroy any hard copies of it and notify the sender. You must not, directly or indirectly, use, disclose, distribute, print, or copy any part of this message if you are not the intended recipient. The sender or any of its subsidiaries each reserve the right to monitor all e-mail communications through its networks. ******************************************** -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (MingW32) iQEcBAEBAgAGBQJMxckEAAoJEIk0Dw4U/G3lF70H/0NtQBRn9ZhUJx8m8vXXmZXO SjictyYhtw03vIxNRYSye2SwLRdSdV8YE6TDsNEFrA6z/yKoraLkQKBBxzgR10NZ 8QwVsj/XBOTSfv3+r+BAWPZjOx+N/IiuQ5fsVe/6l2z39lH/9sJqjem4Rp0/gbl/ 8fCG+WNspYVssU3T81Axs9cHKYI4owCdXnTJGMCm6a5JOP1QTlwK+xMd6/iCbIFY Jijj7rJC69eivQUdQOxi7tBrKAf+hx4Hm9S0torwSO2I7nL93rIe/9GocqghmsLW Ce5RFY5pReIUL7lErCzKLxEdieeYmAzLg8VPz58vkyq94f9xHm5cHB65kOnSapc= =CK8N -----END PGP SIGNATURE----- From - Sat May 21 19:28:36 2011 X-Mozilla-Status: 0001 X-Mozilla-Status2: 00000000 Delivered-To: khijazi@unveillance.com Received: by 10.14.119.13 with SMTP id m13cs133943eeh; Wed, 10 Nov 2010 17:12:34 -0800 (PST) Received: by 10.224.201.5 with SMTP id ey5mr206662qab.347.1289437699880; Wed, 10 Nov 2010 17:08:19 -0800 (PST) Received-SPF: neutral (google.com: 216.255.83.232 is neither permitted nor denied by best guess record for domain of unknown) client-ip=216.255.83.232; Received: by 10.241.83.225 with IMAP4 id 33mf191109qyl.70; Wed, 10 Nov 2010 17:08:19 -0800 (PST) X-Gmail-Fetch-Info: khijazi@unveillance.com@mail18.mydomainwebhost.com -1 mail18.mydomainwebhost.com 143 khijazi@unveillance.com X-Spam-Checker-Version: SpamAssassin 3.2.5 (2008-06-10) on spam1.pem.inap.sea.dotster.net X-Spam-Level: X-Spam-Status: No, score=0.1 required=3.5 tests=HTML_MESSAGE,RDNS_NONE autolearn=no version=3.2.5 Received: (qmail 21595 invoked from network); 25 Oct 2010 16:02:24 -0000 Received: from unknown (HELO pom03.cc.juniper.com) ([216.255.83.232]) by 66.11.233.58 with SMTP; 25 Oct 2010 16:02:24 -0000 Received-SPF: none (66.11.233.58: domain of paperlesssndr@cc.barclaycardus.com does not designate permitted sender hosts) Received: from spms2019a (spms2019a [10.255.13.36]) by pom03.cc.juniper.com (Postfix) with ESMTP id 8C53E50E9A for ; Mon, 25 Oct 2010 16:00:42 +0000 (GMT) Date: Mon, 25 Oct 2010 16:00:42 +0000 (GMT+00:00) From: Barclaycard Financing Visa Card Reply-To: paperless@cc.barclaycardus.com To: khijazi@unveillance.com Message-ID: <35322319.9401288022442578.JavaMail.batchmgr@spms2019a> Subject: Account Alert: Welcome To Paperless Statements MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_Part_391_35115602.1288022442578" X-Juniper-NotifId: 372544230 ------=_Part_391_35115602.1288022442578 Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Re: Your Barclaycard Financing Visa Card Account ending in 7346 Dear KARIM, Congratulations! Welcome to the convenience of Paperless Statements. By enrolling to receive your monthly statement online at www.BarclaycardUS.com, you will now enjoy less clutter in your mailbox since you'll no longer receive a paper statement. Please be sure to keep your email address updated and notify us if it changes at any time. If at any point you wish to resume receiving a paper statement, simply log in at www.BarclaycardUS.com, select ACCOUNT ACTIVITY and then PAPERLESS STATEMENTS to change your status. It's that easy. Please note, depending on where your due date falls within the month, you may receive one more paper statement. Future statements will be delivered online. Thanks for your patience and congratulations again on your choice. ______________________________________________________________________ We are happy to send you this Account Alert. You may receive emails for other services, promotions or special offers as well. If you prefer not to receive this Account Alert and/or other emails call 1-866-483-3735 or just log in to www.BarclaycardUS.com and select ALERTS/PROFILE. ------=_Part_391_35115602.1288022442578-- From the EMAIL AND MOBILE ALERTS screen you can choose which Account Alerts you'd like to receive, or unsubscribe from Account Alerts altogether. From the PROFILE screen you can update your PRIVACY OPTIONS. Please Do Not Reply to this Email. This is a notification-only email that cannot accept incoming replies. To send us an email, simply log in to www.BarclaycardUS.com, click on CUSTOMER SERVICE and then select EMAIL to send your message securely. The Barclaycard Financing Visa Card is issued by Barclays Bank Delaware, PO Box 8801, Wilmington, DE 19899, Member FDIC. APF-EM-12655487 ------=_Part_391_35115602.1288022442578 Content-Type: text/html; charset=us-ascii Content-Transfer-Encoding: 7bit WELCOME TO PAPERLESS STATEMENTS
logo WELCOME TO PAPERLESS STATEMENTS

Re: Your Barclaycard Financing Visa® Card Account ending in 7346

Dear KARIM,

Congratulations! Welcome to the convenience of Paperless Statements. By enrolling to receive your monthly statement online at www.BarclaycardUS.com , you will now enjoy less clutter in your mailbox since you'll no longer receive a paper statement. Please be sure to keep your email address updated and notify us if it changes at any time.

If at any point you wish to resume receiving a paper statement, simply log in at www.BarclaycardUS.com, select ACCOUNT ACTIVITY and then PAPERLESS STATEMENTS to change your status. It's that easy.

Please note, depending on where your due date falls within the month, you may receive one more paper statement. Future statements will be delivered online. Thanks for your patience and congratulations again on your choice.

For information about Apple or Apple merchandise please visit store.apple.com. Or, use our Store Locator to find the Apple Store nearest you.

logo

You may receive emails for other services, promotions or special offers as well. If you prefer not to receive this Account Alert and/or other emails call 1-866-483-3735 or just log in to www.BarclaycardUS.com and select ALERTS/PROFILE. From the EMAIL AND MOBILE ALERTS screen you can choose which Account Alerts you'd like to receive, or unsubscribe from Account Alerts altogether. From the PROFILE screen you can update your PRIVACY OPTIONS.

Please Do Not Reply to this Email.
This is a notification-only email that cannot accept incoming replies. To send us an email, simply log in to www.BarclaycardUS.com, click on CUSTOMER SERVICE and then select EMAIL to send your message securely.

The Barclaycard Financing Visa Card is issued by Barclays Bank Delaware, PO Box 8801, Wilmington, DE 19899, Member FDIC.

APF-EM-12655487

------=_Part_391_35115602.1288022442578-- From - Sat May 21 19:28:36 2011 X-Mozilla-Status: 0001 X-Mozilla-Status2: 00000000 Delivered-To: khijazi@unveillance.com Received: by 10.14.119.13 with SMTP id m13cs133944eeh; Wed, 10 Nov 2010 17:12:36 -0800 (PST) Received: by 10.224.208.70 with SMTP id gb6mr242077qab.354.1289437700243; Wed, 10 Nov 2010 17:08:20 -0800 (PST) Received-SPF: neutral (google.com: 173.192.164.133 is neither permitted nor denied by best guess record for domain of unknown) client-ip=173.192.164.133; Received: by 10.241.83.225 with IMAP4 id 33mf191109qyl.70; Wed, 10 Nov 2010 17:08:20 -0800 (PST) X-Gmail-Fetch-Info: khijazi@unveillance.com@mail18.mydomainwebhost.com -1 mail18.mydomainwebhost.com 143 khijazi@unveillance.com X-Spam-Checker-Version: SpamAssassin 3.2.5 (2008-06-10) on spam1.pem.inap.sea.dotster.net X-Spam-Level: X-Spam-Status: No, score=0.1 required=3.5 tests=RDNS_NONE autolearn=no version=3.2.5 Received: (qmail 15724 invoked from network); 25 Oct 2010 16:58:05 -0000 Received: from unknown (HELO tllod.com) ([173.192.164.133]) by 66.11.233.58 with ESMTPS (DHE-RSA-AES256-SHA encrypted); 25 Oct 2010 16:58:05 -0000 Received-SPF: none (66.11.233.58: domain of kruegel@tllod.com does not designate permitted sender hosts) Received: from dhcp-41-222.cs.ucsb.edu (dhcp-41-222.cs.ucsb.edu [128.111.41.222]) (using TLSv1 with cipher AES128-SHA (128/128 bits)) (No client certificate requested) by tllod.com (Postfix) with ESMTPSA id 1667B5FD11; Mon, 25 Oct 2010 10:01:48 -0700 (PDT) Cc: David Dagon , Giovanni Vigna Message-Id: From: Christopher Kruegel To: khijazi@unveillance.com In-Reply-To: <4CC33FB2.3030107@unveillance.com> Content-Type: text/plain; charset=US-ASCII; format=flowed; delsp=yes Content-Transfer-Encoding: 7bit Mime-Version: 1.0 (Apple Message framework v936) Subject: Re: Introductions Date: Mon, 25 Oct 2010 10:00:37 -0700 References: <20101023185012.GA19585@sudo.sh> <4CC33FB2.3030107@unveillance.com> X-Mailer: Apple Mail (2.936) @David: thank you for the introduction. Hi Karim, > Christopher and Giovanni - It is a pleasure to virtually meet both of > you and hope to speak to you in the near future. very nice to e-meet you as well. > As David mentioned, we have been very fortunate with how well our > solution has been received. I would be very interested in discussing > how we may be able to collaborate to leverage our respective > strengths. > We are always on the look out for solid and relevant data to help > enhance our client's experience and intelligence. great, I think this is an area where we could help. > At your convenience, I think a conversation would be in order to flesh > out some possibilities. definitely, I think that a telco would be the easiest and most effective to discuss possibilities and learn about each others' interests and products. when are you available? I will be traveling most of the week, but I think that I can squeeze in a slot either Tuesday, Wednesday, or Friday afternoon (PST). thanks, and looking forward to speaking to you. christopher From - Sat May 21 19:28:36 2011 X-Mozilla-Status: 0001 X-Mozilla-Status2: 00000000 Delivered-To: khijazi@unveillance.com Received: by 10.14.119.13 with SMTP id m13cs133946eeh; Wed, 10 Nov 2010 17:12:37 -0800 (PST) Received: by 10.224.20.70 with SMTP id e6mr235839qab.356.1289437700244; Wed, 10 Nov 2010 17:08:20 -0800 (PST) Received-SPF: neutral (google.com: 173.192.164.133 is neither permitted nor denied by best guess record for domain of unknown) client-ip=173.192.164.133; Received: by 10.241.83.225 with IMAP4 id 33mf191109qyl.70; Wed, 10 Nov 2010 17:08:20 -0800 (PST) X-Gmail-Fetch-Info: khijazi@unveillance.com@mail18.mydomainwebhost.com -1 mail18.mydomainwebhost.com 143 khijazi@unveillance.com X-Spam-Checker-Version: SpamAssassin 3.2.5 (2008-06-10) on spam1.pem.inap.sea.dotster.net X-Spam-Level: X-Spam-Status: No, score=0.1 required=3.5 tests=RDNS_NONE autolearn=no version=3.2.5 Received: (qmail 9941 invoked from network); 25 Oct 2010 17:37:31 -0000 Received: from unknown (HELO tllod.com) ([173.192.164.133]) by 66.11.233.58 with ESMTPS (DHE-RSA-AES256-SHA encrypted); 25 Oct 2010 17:37:31 -0000 Received-SPF: none (66.11.233.58: domain of kruegel@tllod.com does not designate permitted sender hosts) Received: from dhcp-41-222.cs.ucsb.edu (dhcp-41-222.cs.ucsb.edu [128.111.41.222]) (using TLSv1 with cipher AES128-SHA (128/128 bits)) (No client certificate requested) by tllod.com (Postfix) with ESMTPSA id 2E27C5FD11; Mon, 25 Oct 2010 10:41:17 -0700 (PDT) Cc: Giovanni Vigna Message-Id: <043DC20F-836F-412E-BFC4-445607718C40@tllod.com> From: Christopher Kruegel To: khijazi@unveillance.com In-Reply-To: <4CC5BF6F.9020507@unveillance.com> Content-Type: text/plain; charset=US-ASCII; format=flowed; delsp=yes Content-Transfer-Encoding: 7bit Mime-Version: 1.0 (Apple Message framework v936) Subject: Re: Introductions Date: Mon, 25 Oct 2010 10:40:05 -0700 References: <20101023185012.GA19585@sudo.sh> <4CC33FB2.3030107@unveillance.com> <4CC5BF6F.9020507@unveillance.com> X-Mailer: Apple Mail (2.936) > Why don't we shoot for a call tomorrow (Tuesday) afternoon. What time > works for you? Looking forward to it! I have to be on a panel until 3pm PST (and I believe that Giovanni has a meeting at that time). what about 4pm PST? Giovanni, does that work for you? christopher From - Sat May 21 19:28:36 2011 X-Mozilla-Status: 0001 X-Mozilla-Status2: 00000000 Delivered-To: khijazi@unveillance.com Received: by 10.14.119.13 with SMTP id m13cs133949eeh; Wed, 10 Nov 2010 17:12:38 -0800 (PST) Received: by 10.229.249.3 with SMTP id mi3mr159693qcb.287.1289437700742; Wed, 10 Nov 2010 17:08:20 -0800 (PST) Received-SPF: neutral (google.com: 128.111.41.14 is neither permitted nor denied by best guess record for domain of unknown) client-ip=128.111.41.14; Received: by 10.241.83.225 with IMAP4 id 33mf191109qyl.70; Wed, 10 Nov 2010 17:08:20 -0800 (PST) X-Gmail-Fetch-Info: khijazi@unveillance.com@mail18.mydomainwebhost.com -1 mail18.mydomainwebhost.com 143 khijazi@unveillance.com X-Spam-Checker-Version: SpamAssassin 3.2.5 (2008-06-10) on spam1.pem.inap.sea.dotster.net X-Spam-Level: X-Spam-Status: No, score=-3.9 required=3.5 tests=RCVD_IN_DNSWL_MED,RDNS_NONE autolearn=unavailable version=3.2.5 Received: (qmail 15503 invoked from network); 25 Oct 2010 17:47:19 -0000 Received: from unknown (HELO stamps.cs.ucsb.edu) ([128.111.41.14]) by 66.11.233.58 with ESMTPS (DHE-RSA-AES256-SHA encrypted); 25 Oct 2010 17:47:19 -0000 Received-SPF: none (66.11.233.58: domain of vigna@cs.ucsb.edu does not designate permitted sender hosts) Received: from [192.168.5.184] ([64.134.230.68]) (authenticated bits=0) by stamps.cs.ucsb.edu (8.14.4/8.13.1) with ESMTP id o9PHn2Po024666 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=NO); Mon, 25 Oct 2010 10:49:56 -0700 Subject: Re: Introductions Mime-Version: 1.0 (Apple Message framework v1081) Content-Type: text/plain; charset=us-ascii From: Giovanni Vigna In-Reply-To: <043DC20F-836F-412E-BFC4-445607718C40@tllod.com> Date: Mon, 25 Oct 2010 10:49:56 -0700 Cc: khijazi@unveillance.com Content-Transfer-Encoding: quoted-printable Message-Id: <0F5B1FD4-0817-47AF-8856-74DDB5406A67@cs.ucsb.edu> References: <20101023185012.GA19585@sudo.sh> <4CC33FB2.3030107@unveillance.com> <4CC5BF6F.9020507@unveillance.com> <043DC20F-836F-412E-BFC4-445607718C40@tllod.com> To: Christopher Kruegel X-Mailer: Apple Mail (2.1081) X-Greylist: Sender succeeded SMTP AUTH, not delayed by milter-greylist-4.0a6 (stamps.cs.ucsb.edu [128.111.41.14]); Mon, 25 Oct 2010 10:49:56 -0700 (PDT) X-Virus-Scanned: clamav-milter 0.96.3 at stamps X-Virus-Status: Clean It does not work for me, unfortunately. Can we do 5pm? On Oct 25, 2010, at 10:40 AM, Christopher Kruegel wrote: >> Why don't we shoot for a call tomorrow (Tuesday) afternoon. What = time >> works for you? Looking forward to it! >=20 > I have to be on a panel until 3pm PST (and I believe that = Giovanni has a meeting at that time). what about 4pm PST? Giovanni, does = that work for you? >=20 > christopher