Maricopa County Auditors Seek Ballot Envelope Images, Splunk Logs After Discovering Discrepancies

The Epoch Times ^ | July 15, 2021 | ZACHARY STIEBER

[E. Pluribus Unum]

Teams conducting a forensic audit in Arizona’s largest county said on July 15 that they want more items to complete their review, which has turned up several major discrepancies.

The auditors, led by Florida-based Cyber Ninjas, want ballot envelope images, router images, splunk logs, hard drives that contain information about the 2020 election in Maricopa County, and details on the county’s policies and procedures as they try to complete a review that started nearly three months ago.

That information could help clear up issues that have been identified.

Doug Logan, CEO of Cyber Ninjas, told senators at the Arizona state Capitol during a hearing that auditors could find no record of the county sending more than 74,000 mail-in ballots. He also said auditors found approximately 18,000 people voted but were removed from voter rolls “soon after the election, 11,326 people who were not on the voter rolls on Nov. 7, 2020, but appeared on the rolls on Dec. 4, 2020, and 3,981 people who voted after registering after Oct. 15, 2020.”

Ben Cotton, CEO of CyFIR, a subcontractor working on the audit, said the analysis of the election management system and network uncovered “severe cybersecurity problems,” including that antivirus programs weren’t up to date.

The hearing came after Arizona Senate President Karen Fann, whose Republican caucus authorized the audit late last year, said the auditors’ ballot count produced a different number from the county’s count.

Logan said the discrepancies with mail-in ballot records should trigger a canvassing proposal that was put on hold under pressure from the Department of Justice.

[BipolarBob]

Yeah, we wanna see them splunk logs. In color.

[WellyP]

What is Splunk? Splunk is a software platform widely used for monitoring, searching, analyzing and visualizing the machine-generated data in real time. It performs capturing, indexing, and correlating the real time data in a searchable container and produces graphs, alerts, dashboards and visualizations.

[Guenevere]

It has begun

[livius]

Thanks! I thought “splunk” was a typo.

[servantboy777]

So is there a process to de-certify electoral college votes in states?

[rlmorel]

I just posted this on another thread, E. Pluribus Unum, I hope you don't mind my posting it here. It is important to understand why those router logs are needed.

From the article at UnderCover DC Guilty! Arizona Senate Debunks the Left's Big Lie

"...Additionally, in March 2021 (four or five months AFTER the election) 37,646 queries hit the system for a “blank password on a system that only contained 8 accounts,” according to Cotton.

Cotton explained that “clearly, there was a script executed by an EMS admin.” He has no idea where that script came from. That is why he needs the router logs and Splunk data.

The system works on a FIFO basis, first in first out. This is a critical point because once the system hits 20 megabytes of information, the older information is deleted.

Therefore, as Petersen summarized, those 37,646 queries churned the data, so data is only available back to February of 2021..."

So.

For those who don't understand why this is direct evidence of fraud, let me explain why they did this:

• There is only 20 MB of space available on the computer system for these crucial log files. That can always be changed and increased, but these systems probably didn't generate enough log entries under normal operation to saturate those files in a standard election process and cause the log file size to exceed 20 MB (just a guess).
  
  
• If you get more than 20 MB of log files, system will "FIFO" out (First In, First Out) and chop the oldest text off of the log files so they can continue to write new data to the logs. There are many systems that will choke and cause errors if they cannot write to a log file if they are configured to do so, so many systems are configured this way.
  
  
• Someone logged on who could run scripts as an administrator which would allow them to run without entering a password. NOTE: They likely had dozens if not hundreds of people who used the Administrator password, and it was probably known to people who they had no idea knew what it was. They may have even had it taped to the monitors for all I know (this happened in Antrim County, Michigan). In this case, I think they suspect it was done remotely, which is why those router logs are crucial. This means they have no idea, none whatsoever who ran that script 37,646 times.
  
  
• Whoever that person was repeatedly ran the script. Each time they ran the script, the act generated a log entry saying the script was being run with no password, and that the script was run.
  
  
• As the script ran and generated a log file entry, it caused the log file to grow larger and larger in size until it reached 20 MB.
  
  
• With each running of the script that generated a log file entry, it began to cut off the older log file entries, most likely the ones from before, during, and after November 3, 2020.
  
  
• With each running of the script and the accompanying log file entry, any critical and important log file entries from the time surrounding the November 3rd election were chopped off and discarded.
  
  
• Whoever the unknown and malicious "administrator" described above was had to repeat this script 37,646 times until they were satisfied no critical or damning log files remained from around the election window.

As someone who has had to personally inspect computers for malicious, intentional activity, the absence of logs (erased) or the manipulation of logs as described above is a GIANT RED FLAG that someone was trying to hide something and cover their tracks.

Of course, there may have been a valid reason someone ran a script all those times. But nobody knows why, what the script did exactly, where the script came from, and...most of all...who ran it.

IF THEY CAN GET THE ROUTER LOGS, THEY MAY WELL BE ABLE TO SEE WHERE THIS SCRIPT WAS BEING RUN FROM.

THEY CAN MATCH UP THE DATES AND TIMES THE SCRIPT WAS RUN WITH THE ROUTER LOG FILE DATES AND TIMES.

AND THAT MAY BE WHY THE PEOPLE RESPONSIBLE FOR THIS FRAUD ARE RESISTING WITH ALL THEIR MIGHT TO RELEASE THE ROUTER INFORMATION.

[ClearCase_guy]

I’d like to see 2 things:

1) A company should step forward with an utterly transparent voting process that can be quickly and reliably audited. Results in 24 hours. Exactly what happened. That company ought to be able to do hefty business in all 50 states. Which brings me to point #2.

2) Citizens in all 50 states should promote a ballot referendum that their state be required to adopt an utterly transparent voting process that can be quickly and reliably audited.

So far, neither political party seems especially interested in such things, Not after Bush/Gore, not after Trump/Hillary, not after Trump/Biden.

[E. Pluribus Unum]

So is there a process to de-certify electoral college votes in states?

It's called "the legislature."

[lepton]

Without explanation, there are enough problematic ballots (107k) to put the Senate race (78k difference) in play, much less the Presidential one.

[Pollard]

can you make that a little bigger? I can’t quite make it out.

[rlmorel]

Okay. I’ll see if I can do that.

Since you said that, I know it is long, and a lot of short attention span folks don’t read those complicated issues that cannot be boiled down into a funny animated gif...what do you think of the issue?

[Pollard]

20mb is insane. It’s the equivalent of one high resolution picture from a decent digital camera. They make 64gb(65,000+mb) MicroSD cards the size of a thumbnail.

I’ve opened 50mb text files and it was a bit of a struggle for my various text editors. Sublime code editor handled it the best. I can possibly see limiting a single log file to that size but it’s super basic to write the code to save a log file and start a new one at a certain size. My WordPress websites do that.

There’s no good reason to have one single 20mb log file, unless your plan is to be able to wipe it easily with a script to cover your tracks.

Dominion people are complicit.

[texas booster]

There are several races across the country that could be affected by a 100k modification.

[Tupelo]

Nope. Not in the Constitution. One of the few things the Framers did not think about was Computer Fraud.

[tennmountainman]

I was traveling long distance today and listened to The Arizona GOP Senate LIVE. It was shocking the amount of fraud that has been discovered so far.

[grey_whiskers]

[rlmorel]

Right. Of course, that likely is configurable, and space is cheap.

Trying to keep my mind open, under normal circumstances I would assume poor software design by a vendor, and would send them a suggestion that, by default, they make them 250 MB or something like that.

But I also try to remember that logging in various systems is highly variable. Some logs are so verbose that is is really hard to sift through them, and logs from another vendor are so sparse and poorly laid out that that they are utterly worthless. I have had lots of conversations about medical system logs when trying to figure out why something failed, that you say to the vendor:

“Look. I am glad you show the date and time the software opened and what the version is at that time in your logs, but...you don’t log who opened and closed a specific patient file! What good is that???” (cue indignant and frustrated voice)

What is really frustrating is the logs that are really verbose and cluttered, but contain very little useful information.

[rlmorel]

BTW, I use Notepad++...brilliantly good. Free, and opens up the largest files nearly instantly.

[bitt]

p