Vault 7: Projects
This publication series is about specific projects related to the Vault 7 main publication.
SECRET
4.3 (U) Stopping and Suspending Work
(S) Collection will run until one of the following events occurs:
• All directories are walked and files are copied to the USB drive
• The USB drive is removed from the target machine
• When there is no space left in the covert partition
(S) Note: Errors are not logged or reported. If collection is halted for any reason the
program will silently exit.
4.4 (S) Post-processing of Collected Data
(S) The utility, ExitRamp 3.1.1 is used on a Base system at Headquarters or Station to
collect the data from the covert partition of a thumb drive used by ExpressLane v3.1.1.
After selecting the ExitRamp icon, the utility will launch a GUI and look as follows:
10
SECRET
ExpressLane-3_1_1-User_Manual-Rev_New_2009-04-06.pdf