Page 95 of Blind Prophet

Me

At best, it’s circumstantial. Zenith sells satellite capabilities to countries. Interested customers could easily make someone’s watch list.

SF

An overview of his financial positions shows consistent hedging of complex derivative trades and short positions just before events.

That’s interesting, but…

Me

Circumstantial.

SF

Stop. Let me relay the highlights of the report.

SF

The team identified encrypted communications sent at odd hours from his father’s account. Conversations with known extremists and Russian sympathizers. EXTENSIVE conversations. And you said it can’t be his father.

SF

The team tracked calls to burner phones in countries where the attacks occurred, plus calls to many of his father’s known associates. Which, again, you said he’s not making those phone calls, yet those calls have been increasing in frequency, not declining.

SF

Searches from the compound on infrastructure vulnerabilities. Including searches on chemical weapons and their effects.

How did they track his searches?

SF

Over the last several years, he’s installed security upgrades, including the installation of military-grade communications equipment. We tracked the purchases and confirmed delivery.

Me

All circumstantial.

SF

I’m not done.

SF

Check the attachment. It details documents we located by hacking into a server the Moores own in Iceland. It’s a series of detailed technical documents outlining infrastructure vulnerabilities, time-stamped months before the attacks. All written in Dorian’s distinctive technical style. That could never have been his father, as Dorian is the tech guy.

SF

We originally thought he was working with his father, but if what you are saying is true, he’s executing this on his own or with others within the alliance.

SF

And this isn’t everything. Since 2015, he’s attended twenty-two conferences with well-known cyber warfare experts.

Me

Pattern analysis 101—correlation isn’t causation. We’re building a narrative from disparate data points. What’s our confidence level on the Iceland server attribution? Hedge fund managers always have complex trading positions. And cyber warfare conferences are industry standard for satellite companies.