Vault 7: Projects

This publication series is about specific projects related to the Vault 7 main publication.

SECRET
4.3 (U) Stopping and Suspending Work
(S) Collection will run until one of the following events occurs:
All directories are walked and files are copied to the USB drive
The USB drive is removed from the target machine
When there is no space left in the covert partition
(S) Note: Errors are not logged or reported. If collection is halted for any reason the
program will silently exit.
4.4 (S) Post-processing of Collected Data
(S) The utility, ExitRamp 3.1.1 is used on a Base system at Headquarters or Station to
collect the data from the covert partition of a thumb drive used by ExpressLane v3.1.1.
After selecting the ExitRamp icon, the utility will launch a GUI and look as follows:
10
SECRET

e-Highlighter

Click to send permalink to address bar, or right-click to copy permalink.

Un-highlight all Un-highlight selectionu Highlight selectionh