TABLE OF CONTENTS – VOLUME I INTRODUCTION TO VOLUME I EXECUTIVE SUMMARY TO VOLUME I I. THE SPECIAL COUNSEL’S INVESTIGATION II. RUSSIAN “ACTIVE MEASURES” SOCIAL MEDIA CAMPAIGN A. Structure of the Internet Research Agency B. Funding and Oversight from Concord and Prigozhin C. The IRA Targets U.S. Elections 1. The IRA Ramps Up U.S. Operations As Early As 2014 2. U.S. Operations Through IRA-Controlled Social Media Accounts 3. U.S. Operations Through Facebook 4. U.S. Operations Through Twitter a. Individualized Accounts b. IRA Botnet Activities 5. U.S. Operations Involving Political Rallies 6. Targeting and Recruitment of U.S. Persons 7. Interactions and Contacts with the Trump Campaign a. Trump Campaign Promotion of IRA Political Materials b. Contact with Trump Campaign Officials in Connection to Rallies III. RUSSIAN HACKING AND DUMPING OPERATIONS A. GRU Hacking Directed at the Clinton Campaign 1. GRU Units Target the Clinton Campaign 2. Intrusions into the DCCC and DNC Networks a. Initial Access b. Implantation of Malware on DCCC and DNC Networks c. Theft of Documents from DNC and DCCC Networks B. Dissemination of the Hacked Materials 1. DCLeaks 2. Guccifer 2.0 3. Use of WikiLeaks a. WikiLeaks’s Expressed Opposition Toward the Clinton Campaign b. WikiLeaks’s First Contact with Guccifer 2.0 and DCLeaks c. The GRU’s Transfer of Stolen Materials to WikiLeaks d. WikiLeaks Statements Dissembling About the Source of Stolen Materials C. Additional GRU Cyber Operations