From the Bin Laden Letters: Mapping OBL’s Reach into Yemen

Following our initial analysis of the Osama bin Laden letters released by Combating Terrorism Center (CTC) at West Point, we’ll more closely examine interesting moments from the letters and size them up against what was publicly reported as happening in the world in order to gain a deeper perspective on what was known or unknown at the time.

Isolating and analyzing references to those in Yemen with relations to Osama bin Laden (OBL), as identified in the Combating Terrorism Center (CTC) letters, we find a few key al-Qaeda individuals associated with the country in the correspondence of OBL.

Bin Laden Yemen Social Network

Bin Laden's Yemen connections from letters - Click for full size

Highlighted are several of the prominent actors, and below, we’ll examine the social network for several of those figures:

  1. Anwar al-Awlaki (senior AQAP spokesman and recruiter, killed September 2011)
  2. Saeed al-Shihri (deputy leader of AQAP, killed in February 2011)
  3. Nasir al-Wuhayshi (senior AQAP leader and OBL’s former secretary)

From “Closed Source” to Open Source

To do so, we’ll switch from the isolated instance of Recorded Future used for analysis of the letters (our separate repository to examine just the OBL documents) to the full Recorded Future index of events culled from more than 70,000 public sources. There we can look at relations for each of these three individuals during the same timeframe covered by the corpus of letters – 2006 to 2011. Here’s the big picture:

AQAP Social Network

AQAP Social Network from Public Sources - Click for Full Size

Connectors

In addition to OBL himself, there are several individuals that actually tie into all three of those highlighted above. One of the most prominent is Qasim al-Raymi, a high ranking member of the AQAP leadership and a prison escapee alongside al-Wuhayshi in 2006.

One item to to note in the network graph of al-Raymi’s connections shown below is the absence of a direct connection to Bin Laden.

Qasim al Raymi Network

Qasim al Raymi AQAP Network

The second name to link up with al-Wuhayshi, al-Shihri, and al-Awlaki is Yemeni journalist Abdul Elah Haidar Shaea, who was sentenced in early 2011 to five years for serving as a media advisor to AQAP. Court proceedings alleged that Shaea had high profile meetings with each of those AQAP head figures cited above as well as Qasim al-Raymi.

Haidar Shaea AQAP Network

Haidar Shaea AQAP Connections - Click for full size

The Haidar Shaea event is particularly interesting when adding context by way of the letters featured in the CTC release, paricularly  document 00000016 dated October 2010 to Nasir al-Wuhayshi that outlines the stance and value on image through the media: “We need to understand that a huge part of the battle is the media, and the cable channels today play a stronger role than the Hja‟in poets during the ignorant era.”

Text from letter to Abu Basir

Scanning the full network and the subsequent relations connected to Qasim al-Raymi there is a single Western name: Adam Gadahn.

Adam Gadahn Connection

Gadahn is an American born media spokesman for Al-Qaeda that shows close connections to each of the three highlighted OBL ties in Yemen. He is also presumed to be the author of one of the letters released by CTC, and in producing and appearing in a number of a propaganda videos during the last decade is tightly knit into this social network of AQAP.

Adam Gadahn AQAP Network

Adam Gadahn AQAP Connections - Click for Live View

Edges

Isolated edges in the broad network above also describe segmentation of responsibilities and unique relationships. Recently in the news AQAP bomb-maker Ibrahim Hassan al-Asiri was linked to al-Awlaki, but not others, through their respective roles in setting in motion the attempted bombing of a flight to Detroit in December 2009; al-Asiri was, in fact, initially believed to be killed in attacks on al-Awlaki in May and September 2011. However, recent events show that al-Asiri is very much active in orchestrating strikes against the United States.

Awlaki and Asiri Connection

Anwar al-Awlaki and Ibrahim al Asiri Relation

One other standout name, in a network full of men, is Haylah al Qassir. She is connected to Saeed al-Shihri by way of a video released after her arrest calling for the kidnapping of Saudi officials as retribution. Al-Qassir was reportedly a main conduit of funding and recruiting for AQAP.

Haylah al Qassir AQAP Connections - Click for Full Size

Conclusion

This analysis provides an overview of the individuals in Yemen that were closely tied to Osama bin Laden during the period of his correspondence from Abbottabad, and then shifts to leverage the expanse of media coverage and discussion on AQAP to identify individuals tightly woven into that network that remain influential in AQAP today.

In doing so, we’re able to identify key people to track going forward:

  • Nasir al-Wuhayshi
  • Qasim al-Raymi
  • Abdul Elah Haidar Shaea
  • Adam Gadahn
  • Ibrahim Hassan al-Asiri
  • Haylah al Qassir

 

Undoubtedly, we’re only scratching the surface, and there’s so much more to untangle even just from the relations above. We’ll continue to share analysis on related issues in an attempt to connect the dots between the correspondence released by CTC and the vast public record we have on Al-Qaeda, but if you have questions or want to do a more comprehensive examination of these relationships, contact Recorded Future.


Osama Bin Laden Letters Analyzed

Update: added animated network showing evolution of  relationships over time.

Thirty six hours ago, the Combating Terrorism Center (CTC) released 17 new letters (175 pages) discovered in the Abbottabad compound where Osama bin Laden was discovered and killed last year. The documents were made available as part of a report entitled “Letters from Abbottabad: Bin Ladin Sidelined?

This post shows analysis of all 17 letters using Recorded Future’s temporal analytic technology and intelligence analysis tools. This first effort analyzes the English translated text and will be followed by an analysis of the letters in their original Arabic.

We treated these letters like they were any other source in the Recorded Future system. Our linguistic algorithms extracted a variety of data points available in the text that we then visualized in the Recorded Future user interface:

Recorded Future - Bin Laden Letters Analysis Process

Analyzing these documents in aggregate and visualizing them using Recorded Future immediately reveals a number of patterns and insights. We’ll start with a network graph generated from the connections found in the body of letters where it’s clear to see the focal points of God, Yemen, and Afghanistan:

Network of Connections in UBL Letters - Click to Enlarge

Seeing the locations described in the network, we can actually uncover what locations are mentioned the most:

UBL Places of Interest through Letters - Click to Enlarge

Shifting back to a network view, let’s find what individuals are associated with Iran in the collected letters:

Bin Laden Iran Netwokr

UBL Letters Associations with Iran - Click to Enlarge

And to serve as a comparison, below are those relations referenced with Yemen:

Bin Laden Yemen Network

Bin Laden Letters Yemen Associations - Click to Enlarge

We can also use Recorded Future, which contains a time slider to adjust the displayed data, to look at how the full network of connections between entities evolved over several years.

Time Lapse Bin Laden Network

Time Lapse Bin Laden Network - Click for Larger View

Moving to a timeline analysis of the letters and references within, there is a glaring absence of communication during 2008. Was this a time when Osama bin Laden went dark? Or is there sensitive information in documents from that period meaning they’re still under wraps?

Timeline of bin Laden Letters

Timeline of bin Laden Letters - Click to Enlarge

Getting a deeper look at the years from which we capture quite a bit of data:

Osama bin Laden Timeline 2007

2007

Osama bin Laden Timeline 2009

2009

Osama bin Laden Timeline 2010

2010

Lastly, one of the unique features of Recorded Future includes the ability to extract references to predictions and future periods of time. From this particular set of documents, one future reference emerged related to planning the foundation of a Muslim state.

Osama Bin Laden Future Prediction


Global Protests on May Day

Track all of the global protest activity taking place on International Workers’ Day (or May Day or Labor Day depending on your location) including plans to reignite the “Occupy” movement.

Google Earth Plug-In Needed for Live View or Use Network View!


Events to Watch Next Week – April 29 to May 5

Select events to watch next week all identified using Recorded Future. Please leave us a comment if there’s a particular subject that would be interesting, and we’ll do our best to incorporate in the future.

Geopolitical:

 

Public Figures:

  • Monday, April 30 – Japanese PM Yoshihiko Noda to meet with US President Barack Obama during four day Washington summit.
  • Tuesday, May 1 – French presidential candidates Nicolas Sarkozy and Francois Hollande to participate in live, televised debate; J.D. Hickey to takeover as COO at BlueCross BlueShield of Tennessee.
  • Wednesday, May 2 – In preparing for the Olympics, English national soccer coach Stuart Pierce will visit Los Angeles to watch David Beckham.
  • Thursday, May 3 – Mitt Romney and Rick Santorum are set to have a face-to-face meeting.
  • Friday, May 4 – Former Lowe’s executive VP of store operations Rick Damron is set to takeover COO role.
  • Saturday, May 5 – US Secretary of State Hillary Clinton visits Bangladesh.

 

Corporate:


Upcoming Events to Watch for Cyber Threats

Two events in May that warrant attention from information security analysts include the court appearance of alleged LulzSec hacker Ryan Cleary in the UK and the NATO summit in Chicago (the G8 meeting originally set to take place in the city has since been moved to Camp David).

Upcoming Events Related to Hacktivist Groups

Keep an eye on other forewarned attacks or future events related to hacker groups by setting up a Recorded Future email alert on the subject.


Egyptian Parliamentary Polls and Parallel Presents

This piece is the second in a three-part series (Part 1, Part 2, Part 3), which uses Recorded Future to examine the Muslim Brotherhood and Egypt’s political future. We’ll be hosting a webcast discussing this research next Thursday, April 12.

Introduction

As covered in the last  post, the actors that comprise leadership of the Muslim Brotherhood has and does change over time. In the months following the January 25th uprising, the Muslim Brotherhood stepped into the vacuum left by Mubarak. More specifically, the younger members of the Muslim Brotherhood challenged the party’s older leadership, in some cases, deciding to desert or defect.

Using time windows to evaluate changes over time is a powerful analytical methodology. In unique cases, such as  that of a revolution, the political development under study shifts the paradigm. How to understand the indicators of an event which is not foreseen? With Recorded Future’s temporal analysis, we can look at a set period of time as it was forecast, actually happened, and covered afterward.

Figuring out the FJP and Detecting Defections

Post-January 25th, the Muslim Brotherhood’s leader, Mohammed Badie, feared that he would lose the support of the youth. Subsequently, he issued an edict forbidding any defections or creation of new parties. Shortly thereafter, the Muslim Brotherhood formed its own political party, the Freedom and Justice Party, with Mohammed Saad al-Katani as the head. As demonstrated previously, it is a quick process to visualize the key players and their relationships, which we can use for future searches.

In response, the younger elements of the Muslim Brotherhood gathered to discuss a new agenda for the party — one that focused on greater transparency in government, better relations with the West, and equality for minority Coptics and women. In the subsequent months, some Muslim Brotherhood youth formed a new party, Al-Tiyyar Al-Masri, or  “Egyptian Current Party” (ECP), which was part of the Revolution Continues Bloc.

As coalitions evolve and dissolve, it is complicated to follow each of the statements and responses by the various elements within a coalition. To track this element, I created a watchlists — of ECP members, other parties in the coalition, and members of the Islamist alliance. Typically to visualize shifting alliances, one would need the assistance of this guide from the Carnegie Endowment for International Peace combined with this map from The Arabist blog. Below is a dynamic and time-shiftable network visualization of the players and parties in the Islamist alliance:

Network Map of Islamist Alliance

Network Map of Islamist Alliance

From this expanded network map, we may notice a few more players who hadn’t previously been on our radar, so we can create a watchlist from all these entities. Just as easily, it is possible to visualize the Revolution Continues Bloc and do the same. Now we have a more robust way to search, monitor, and visualize the evolving relationships.

Prognosticating Presidential Elections

How do we figure out what we are missing? Recorded Future’s toolset empowers an analyst to accelerate the process of hypothesis testing, by quickly identifying topical and temporal blindspots, in this case around key dates leading up to the presidential election.

More than bureaucratic planning, these date of Egypt’s presidential election underpinned two important political dynamics. First, the Muslim Brotherhood explicitly vowed not to enter a candidate into the presidential race and expelled one of its own leaders, Abdel Moneim Aboul Fotouh, when he declared his intent to run. Following this moving window is critical to watching the Brotherhood’s calculation of if and when it would nominate a formal candidate.

In late-February, before the date was known, here is a picture of the forecasted dates for the election and preceding candidate registration period:

Key Egyptian Election Dates

Key Egyptian Presidential Election Dates

There was a peak in mid-April, as the closing date for candidate registration, and anticipating the elections in late June. Once the elections were announced as late May, we see a different picture of events, though with some additional texture.

Egypt Announced Election Date Timeline

Egypt Announced Election Date Timeline

When the elections were finally announced on February 29th, as slated for May 23, we can see how the forecasts adjust (by setting the publishing date after March 1st). Of course, we find a peak on the candidate closure date (April 8th) and the election dates, May 23rd and May 24th, but we also discover that June 21st is the date set for announcing the final voting results. Not only does this timeline give us a clear picture of dates and how they relate, but also we better understand the previous forecasts, specifically the follow-on announcement of voting results approximately one month after the election date.

In addition to Aboul Fotouh, several others had declared their candidacy (e.g. Amr Moussa) while rumors abounded about whom else might enter the race. To track these developments, I built a watchlist of the announced candidates, and another of the rumored and potential candidates. For the announced candidates, one can quickly develop a sense of varied sentiment for each of the candidates, as well as how each of them did or did not respond to one another (e.g. El Baradei’s formal withdrawal from the race).

A second dynamic was the revision of the constitution in light of presidential elections: the ascendent Muslim Brotherhood pushed for revision of the constitution after the presidential elections, whereas the ruling military, the Supreme Council of Armed Forces (SCAF), wanted to draft the constitution before the elections to ensure their contribution.

Tracking these shifting developments would typically require constant scanning of press, statement, and policy papers. With Recorded Future’s custom alerts, however, I receive email alerts based on my custom queries, for example, anytime a member of the SCAF talks about election dates or a Brotherhood official mentions the constitution.

Before, During, and After the Parliamentary Polls

In the months after its formation and up to the election bid, the FJP took time to organize; observers wondered how independent the leadership and platform of the FJP would be from the decision-making, influence, and structure of the Muslim Brotherhood. We will address the FJP-MB relationship in the next post — in this one, we will focus on the internal dynamics of the FJP.

First, let’s examine the timeline of events leading up to the November 28, 2011 polls. To narrow the scope of the analysis, it is possible to limit the publication time to not extend beyond November 28 — thus eliminating the benefit of hindsight. Also, we get a more textured narrative if we look at both the timeline of the party and then of just the leadership (from the watchlist created above) from the beginning of July.

Freedom & Justice Party Leadership Timeline up to November Polls

Freedom & Justice Party Leadership Timeline up to November Polls

With lots of volatility in the months following its formation, the FJP had to decide where and how to spend their political capital — from  members of the Muslim Brotherhood youth defecting to issues of transitional justice to consolidation of a platform. In the weeks preceding the parliamentary elections, it became clear that the FJP was setting up for a larger win than initially imagined. Now, to contrast with the same picture of the FJP’s leadership with the same time period (the gray dots are incidents and reports):

Freedom & Justice Party Leadership Timeline up to November Polls

Freedom & Justice Party Leadership Timeline up to November Polls

The clearest differences is that the volatility of momentum was much less during July and August and non-existent in September, but what does that mean? Once we investigate the reason for the peaks, different conclusions can be drawn about the FJP’s challenges during this time. Some of the attention around the FJP’s leadership, naturally, was surrounding announcements of political appointments and meeting outcomes. More specifically, we see two issues emerge: the drafting of the constitution and a platform issue about tourists visiting beaches dressing inappropriately according to the Muslim Brotherhood’s perspective. Later, the leadership highlights the military’s entrenchment, foreshadowing a mounting struggle.

A more complex view is the combined picture of the both the leadership and the party. The ability to disaggregate leadership statements and perspectives from the party overall adds a previously energy-intensive layer of analysis. For contrasting the visualization during and after the opening of the polls, we will just focus on the FJP party, and again Again, the publication time is set for after November 28, so we’re not including coverage form before the polls.

FJP & MB After Elections

FJP & MB After Elections

There are two very sharp peaks — one in mid-December which reflects Yusuf al-Qaradawi’s assurance that sharia law should be applied gradually, likely to assure the West, observers, and Egyptian minorities that the Muslim Brotherhood was not “taking over” the country. The subsequent peaks are around the various rounds, followed by the second sharp peak, when results are announced.

With a sweeping victory, the FJP surprised several analysts who did not expect such a strong performance. In the weeks after the announcement of results, the Muslim Brotherhood, through the FJP, assures that it will not “Islamicize” Egypt. Importantly, Aboul Fotouh garners attention for calling for the Muslim Brotherhood to refrain from “partisan activity.” The last peak in late February is Secretary of State Clinton clarifying that the Brotherhood, now in power, will not renege on the long-standing peace treaty with Israel — an indication that the US wants to keep channels open to the ascendant FJP.

Lastly, let’s briefly look at what the FJP’s formation may have meant for its election bid. By comparing network maps before (left) and after (right) the elections, it is clear that the nodes organize into a more cohesive network. While this conclusion may appear obvious, it does not take much effort or time to confirm the hypothesis.

FJP Players Before Formation

FJP Players Before Formation

FJP Players After Formation

FJP Players After Formation

Similarly, if we wanted to assess if this crystallization continued, we could do the same search for the past month. One of the key drivers of change is the stability and rigidity of an organization’s structure. By contrasting these views over time — and continuing to monitor the shifts — emerging players and patterns of increasing organization (or lack thereof) present themselves.

Conclusion — Comparing Political Presents

As political circumstances change, an expert can separate the signals from the noise. With the ability to constantly scan the horizon, Recorded Future’s custom alerts help track emerging signals, for example, shifting political alliances or the relationship between a recently empowered Muslim Brotherhood and entrenched ruling military. Additionally, we can place political developments in rapid-changing context by comparing relationships among the data before and after key moments. Lastly, Recorded Future shortens the cycle required to become familiar with the sources, stories, and subjects; data visualization provides a topographical map to navigate the terrain of a new topic.

Combining the levels of analysis described above, we now have a set of drivers to track developments in Egypt’s political landscape: FJP’s negotiations with other elements of the Islamist alliance, dates on drafting of the constitution, defections and desertions of the Muslim Brotherhood youth, and the Muslim Brotherhood’s increasing or decreasing coordination with the FJP.

In this post, we investigated the run up to Egyptian parliamentary polls, creation of a new political party, and subsequent results, focusing on answering three questions for the analyst:

  • How do I keep an eye on emerging signals?
  • How do I correct for the benefit of hindsight when assessing a paradigm shift (e.g. a revolution)?
  • Where are my topical and temporal blindspots?

For the last post, we will use Recorded Future to evaluate the background, impact, and anticipation of Khairat al-Shater’s presidential candidacy, the nature of relationship between the FJP and the Muslim Brotherhood, and potential tension points between the SCAF and FJP, focusing on answering three questions for the analyst:

  • How does an individual’s history change with an elevated profile?
  • What can be learned from one-time surprises (e.g. Khairat’s nomination)?
  • How are shifts in and struggles for power portrayed over time, across geographies, and amongst sources?

  • Copyright © 1996-2010 Analysis Intelligence. All rights reserved.
    iDream theme by Templates Next | Powered by WordPress