This GCHQ report dated 3 February 2011 and written by a seconded NSA staff member, alludes to the agencies’ capabilities against 13 models of firewalls produced by Juniper Networks, Inc: see the Intercept article NSA Helped British Spies Find Security Holes In Juniper Firewalls, 23 December 2015.

This GCHQ presentation from November 2010 shows that the agency was logging 30 billion metadata records per day by that year: see the Intercept article Profiled: From Radio to Porn, British Spies Track Web Users’ Online Identities, 25 September 2015.

This CSE (then CSEC) presentation from 2012 describes the Canadian agency’s file download monitoring operation: see the Intercept article Canada Casts Global Surveillance Dragnet Over File Downloads, 28 January 2015. cse-presentation-on-the-levitation-project

This NSA presentation from March 2009 explains how agency analysts can exploit HTTP data through XKeyScore: see the Intercept article XKEYSCORE: NSA’s Google for the World’s Private Communications, 1 July 2015.

A 2007 proposal to the NSA from contractor SAIC, promoting the company’s ability to support “intelligence collection in the games space”: see the New York Times article Spies’ Dragnet Reaches a Playing Field of Elves and Trolls, 9 December 2013.

This NSA classification guide, dated 21 November 2011, covers signals intelligence material that as to be kept secret for more than the standard 60 years: see the Der Spiegel article The NSA in Germany: Snowden’s Documents Available for Download, 18 June 2014.

This NSA information paper dated 8 April 2013 details the agency’s deepening signals intelligence relationship with Saudi Arabia: see the Intercept article The NSA’s New Partner in Spying: Saudi Arabia’s Brutal State Police, 25 July 2014.

A brief description of a working group focused on monitoring and helping to exploit virtual private networks, or VPNs. Established in 2004, the working group publishes regular "VPN Target Activity Reports" on dozens of countries and organizations around the world. "These reports may help you exploit targets' VPNs more successfully," the chair of the working group writes.

Five individuals received awards from the Crypto-Linguistic Association for supporting Operation Iraqi Freedom, the Sudanese peace talks, investigations into the Khobar Towers bombing in Saudi Arabia, and the CLA itself.

Description of an NSA office in Canberra, Australia, staffed by 16 people who work closely with the Australian and New Zealand spy agencies, including to break a network used by the Papua New Guinea Defence Force.

A SIGINT Africa expert describes how an oil boom in West Africa will increase needs from SID customers to make security in the Gulf of Guinea a much higher priority.

WARGODDESS is a system that fuses multiple sources of signal data to help characterize targets and threats and produce estimates about targets and their intentions.

This 24 February 2005 article from the internal NSA newsletter Foreign Affairs Digest describes third party cooperation and interoperability in High Frequency Direction-Finding (HFDF): see the Intercept article Japan Made Secret Deals With The NSA That Expanded Global Surveillance, 24 April 2017.

This NSA presentation from 2012 discusses techniques for subverting “lawful intercept” systems used abroad: see the Intercept article A Death in Athens: Did a Rogue NSA Operation Cause the Death of a Greek Telecom Employee?, 29 September 2015.

A single slide from an NSA PRISM presentation claims that Saudi Prince Salman bin Sultan ordered Syrian rebels to “light up” Damascus in March 2013, to mark the second anniversary of the Syrian revolution: see the Intercept report NSA Document Says Saudi Prince Directly Ordered Coordinated Attack By Syrian Rebels On Damascus, 24 October 2017. […]

These undated heat maps show the number of pieces of communications data the NSA gathers per country in a particular 30 day period, divided into telephony (DNR) and internet (DNI) metadata. Details in the second map refer to a period in January 2013 and third to a period ending in February the same year: see […]

The NSA is now exploring ways to use passports and other official identification cards as a form of signals intelligence. Some countries include a checksum with passport serial numbers, and passports from these countries with incorrect checksums are likely fraudulent. Venezuelan passports will be the first analyzed as part of this exploration. 

Assessment Reports bundle all available signals intelligence alongside an analyst’s interpretation of these intercepts as evidence. A report produced by the NSA’s Libya team in 2002 zeroed in on a Libyan intelligence officer, Mohamed Ismail. Years later, the report proved crucial when he was implicated in a plot to assassinate the Saudi crown prince, which in turn led to the conviction of an American co-conspirator, Abdurahman al-Amoudi.

The PATENTHAMMER system was developed for SOCOM for advanced signal collection with remote, reach-back capability and deployed to Kosovo, Georgia, Afghanistan, Saudi Arabia, Bahrain, and the Philippines.

This 18 May 2010 article from the NSA internal newsletter SIDToday outlines how the agency is reacting to the growth of mobile phone services on board commercial aircraft: see the Intercept article American and British Spy Agencies Targeted In-flight Mobile Phone Use, 7 December 2016.

This 13 September 2010 presentation from the NSA’s OTP VPN Exploitation Team explains the work of the division: see the Der Spiegel story Prying Eyes: Inside the NSA’s War on Internet Security, 28 December 2014.

This page from the NSA intranet dated July 2011 supplies advice from the NSA Offices of General Counsel (OGC) and Oversight and Compliance (NOC) on the admissibility of targeting strategies against the users of popular websites (including WikLeaks and the Pirate Bay): see the Intercept article Snowden Documents Reveal Covert Surveillance and Pressure Tactics Aimed […]

Three redacted slides from an NSA presentation name several states as subjects of ongoing interest: see the Fantástico article Veja os documentos ultrassecretos que comprovam espionagem a Dilma, 2 December 2013.

This slide, taken from the NSA’s annual review of its cooperation with foreign partners, shows an expansion in the agency’s international relationships: see the book No Place To Hide, 13 May 2014.

A seminar will address several key issues facing Saudi Arabia: potential instability in the royal family, internal security threats, and domestic policy questions.

A plot by Libyan dictator Moammar Gadhafi to assassinate the Saudi Crown Prince was revealed by an alleged terrorist during interrogation and corroborated using signals intelligence. 

A funny anecdote about over-preparing for a general's visit.

This intern was deployed to Prince Sultan Air Base in Saudi Arabia a year before the Iraq War. He describes his time as an analyst there, including the relative comfort of the base (“I’m embarrassed to say that it actually had a pool!”).

This March 2007 post from the internal NSA newsletter SIDToday draws attention to voice-masking technology used by subjects of surveillance to frustrate the agency’s voice-recognition efforts: see the Intercept article Finding Your Voice, 19 January 2018.

In this 2005 article from the internal NSA newsletter SIDToday, an NSA employee credits the agency with securing the conviction of Abdurahman Alamoudi in the Eastern District of Virgina: see the Intercept article NSA Secretly Helped Convict Defendants in U.S. Courts, 30 November 2017.