ADMIN
A 🧵 on a Pakistani National caught celebrating the Kirk assassination and holds a visa.

Meet Samad Gul Khan. He is a C#/C++ Developer at @Keysight. He also potentially hid sensitive info from immigration authorities during visa process.

Call Keysight! 707-577-6915Image
Image
Image
Anti-Kirk posts automatically are being scraped and digitally archived.

An anonymous account responded to my investigation into another foreigner (Ashish, more on this later).

This was automatically flagged as suspicious and marked for further review. Image
A scrape was automatically conducted using keywords regarding the Kirk assassination to identify further infractions and ties to foreign countries.

Additional posts were found indicating the account holds a Visa & celebrated the Kirk assassination, which is grounds for removal.Image
Image
Image
Then, an interesting post was found after further review.

He is an associate of @Dayman4hhh aka Ashish Sreejith, who was unmasked by the Chief Intelligence Agency on 9/13.

This made this scalp a high priority, and fueled the investigation.
Image
A scrape of his entire profile was immediately conducted. Then, a name emerged.

Hello, Samad.

However, this is not enough to identify this anonymous account.

More nets had to be cast to identify who this individual was.

Keyword searches were conducted, and we got a hit!Image
He made the mistake of mentioning "IG" and it got caught in the scrape.

He was asking someone for a follow.

From there, the other user was identified as having a public profile. A search was conducted, and a match was found! 😈

However, this is not enough, we need more info!Image
Image
Image
The profile picture matched a public picture he stupidly posted on his own X account.

The Chief Intelligence Agency is getting closer...

However, we need more information to put an identity together.Image
We began to use location identifiers to narrow our scope and scrape conditions. We identified foreign cities, landmarks, and countries to get a complete profile of him.

We began to understand his travel history and occupation (engineering) to put the identity to the account.Image
Image
Image
Image
We also know from his posts he is employed at a company that sends him to the United States.

We also know he has a history of hiding his posts from authorities, an immediate action that warrants a permanent ban info the United States for up to 10 years.

Let's keep going.Image
Image
Image
We know his 1) location, 2) occupation, and 3) name.

Let's do a scrape with these conditions and find a match.

Aaaand...bingo! We found the LinkedIn!

Hello, Samad Gul Khan 😈 @DelusionsOfTime

You should have stayed silent after what I did to @Dayman4hhh.

Oh well.Image
With this information, a larger understanding of his identity began to shape.

He also taught in some capacity at Technische Universität Ilmenau, a school in Germany, about controls/systems engineering. This of course sealed the deal and allowed for a match to his X account.Image
Image
I am calling on @DeputySecState @DHSgov @DHSGenCounsel @ICEgov @USLaborIG to immediately ban this individual from our country and permanently revoke his visa.

I also think his company visas should be flagged as well for review.

We cannot allow this individual into our country.Image
.

You thought you could defend your foreigner friend Ashish @Dayman4hhh & attack Charlie as a foreigner?

Big mistake.

The Chief Intelligence Agency is smarter than both of you combined.

Enjoy the visa ban! 😈

• • •

https://threadreaderapp.com/thread/2099617967902228501.html

You need to be a member of Command Center to add comments!

Join Command Center

Email me when people reply –