# Vault 7: Projects

This publication series is about specific projects related to the Vault 7 main publication.

### Cherry Blossom

# SRI-SLO-FF-2012-177-CherryBlossom_UsersManual_CDRL-12_SLO-FF-2012-171

- 1
- 2
…
- 110
- 111
- 112
- 113
- 114
…
- 174
- 175

SECRET//20350112
9.29.1.4 (U) Flytrap Copy Data Report Use Case
(U) Cherry Blossom writes Copy Data to a pcap file over an extended period of time.
The OWT Report is more lenient with adding Copy Data to a report, since this data
covers a time range and not a specific time like alerts. Figure 58 shows a use case with
two Copy Data sessions.
(U) After the first OWT Report is generated the Red Operation should receive both sets
of Copy Data. The Red Operation will also receive both sets of data since some of the
first set was received while this Operation was active and the second set was received
during the time this Operation was active. The Green Operation will receive the first
Copy Data set, even though some of that data was received after this Operation was
removed from Mission1.
(U) No Copy Data was collected after the first OWT Report was generated, so no
Operations will receive Copy Data in the second OWT Report.
OWT #1 OWT #2
5/20 00:00
5/22 00:00
5/18 00:00
5/19 00:00
5/21 00:00
Mission1
Rev1
FT#1
FT#1
12:00
FT#1
Mission1
Rev2
Mission1
Rev3
FT#1
12:00
12:00
12:00
Copy Data 1
Copy Data 2
Figure 58: Flytrap Copy Data Use Case
112
SECRET//20350112

- 1
- 2
…
- 110
- 111
- 112
- 113
- 114
…
- 174
- 175