Episode
29 October 2019 Official episode · Official transcript
advanced persistent threat
The episode describes the creation and execution of Operation Glowing Symphony, a US military cyber-operation conducted by JTF-ARES against ISIS media infrastructure.
Topics: Offensive military cyber operations, Cyber operations against terrorist media infrastructure, Cyber target-network mapping, Email-account compromise and credential pivoting, Persistence and lateral movement, Domain-controller compromise, Coordinated multi-team cyber operations, Cyber effects including account lockout, deletion, rerouting, misconfiguration, and infrastructure destruction, Operational rehearsals and scripted execution, Signals intelligence and cyber mission teams, Information warfare and disruption of media production
Links published on the Darknet Diaries episode page. Not LLM output.
Qualified statements from this episode, not graph facts.
Operation Inherent Resolve TARGETS ISIS
Operation Inherent Resolve was initiated as the anti-ISIS coalition campaign and included strikes against ISIS infrastructure, leaders, and troops.
Explicit Direction flagged Confidence 98% · Jack Rhysider EP 50 Details
“the US military initiated executive order Operation Inherent Resolve”
“that Navy ship was launching these missiles right into Mosul, raining down one attack after another, taking out ISIS infrastructure”
United States Cyber Command ASSOCIATED_WITH National Security Agency
Jack says US Cyber Command is believed to have been the offensive team within the NSA and that it originated from the NSA before becoming independent.
Uncertain Confidence 95% · Jack Rhysider EP 50 Details
“US Cyber Command is believed to be the offensive team within the NSA. Actually, it came out of the NSA but now it’s its own thing.”
Marine Forces Cyber Command USES Computer network exploitation
MARFORCYBER's mission includes offensive cyberspace operations, and its personnel were trained in computer network exploitation.
Explicit Confidence 91% · Jack Rhysider EP 50 Details
“They sent me to school for larger cyber-security stuff”
“computer network exploitation boot camps and cyber-attack and defend”
“To conduct full spectrum cyber-space operations, including conducting offensive cyber-space operations.”
ISIS media ASSOCIATED_WITH ISIS
ISIS media is described as the umbrella encompassing ISIS's magazines, videos, social-media accounts, websites, and related infrastructure.
Explicit Confidence 98% · Jack Rhysider EP 50 Details
“everything that was associated with that was what was under the umbrella of ISIS media”
ISIS media CONTAINS Rumiyah
Rumiyah is identified as one of ISIS media's flagship magazines.
Explicit Direction flagged Confidence 98% · Jack Rhysider EP 50 Details
“the Rumiyah and the Dabiq magazines were ISIS’s flagship magazine.”
ISIS media CONTAINS Dabiq
Dabiq is identified as one of ISIS media's flagship magazines.
Explicit Direction flagged Confidence 98% · Jack Rhysider EP 50 Details
“the Rumiyah and the Dabiq magazines were ISIS’s flagship magazine.”
Operation Glowing Symphony OPERATED_BY Joint Task Force ARES
JTF-ARES was tasked to execute Operation Glowing Symphony.
Explicit Confidence 99% · Jack Rhysider EP 50 Details
“JTF-ARES was tasked to execute Operation Glowing Symphony”
Operation Glowing Symphony INVOLVES Joint Task Force ARES
Operation Glowing Symphony involved JTF-ARES as the task force carrying out the operation.
Explicit Confidence 99% · Jack Rhysider EP 50 Details
“JTF-ARES was formed to carry out a specific mission”
“JTF-ARES was tasked to execute Operation Glowing Symphony”
Joint Task Force ARES TARGETS ISIS media
JTF-ARES conducts offensive cyber-operations against ISIS and specifically carried out missions to take down ISIS media.
Explicit Direction flagged Confidence 99% · Jack Rhysider EP 50 Details
“JTF-ARES is just cyber-specialists that focus in offensive cyber-operations against ISIS.”
“JTF-ARES was tasked to execute Operation Glowing Symphony with their first mission to take out ISIS media.”
Operation Glowing Symphony TARGETS ISIS media
The operation's objective was to disrupt and destroy as much of the ISIS media network as possible, including servers, domains, email accounts, and related infrastructure.
Explicit Confidence 99% · Jack Rhysider EP 50 Details
“we’re trying to have a symphony of destruction against the enemy here and take down all of the ISIS servers, domains, e-mails, whatever, at the same time.”
“the first mission to take out ISIS media”
Operation Glowing Symphony INVOLVES Credential pivoting
The operation used access to email accounts to pivot into associated accounts and services; the episode presents this as a description of the operation's access method, while the speaker withholds operation-specific details.
Attributed Confidence 84% · Jack Rhysider EP 50 Details
“You can pivot from the e-mail account into the other accounts associated to that e-mail”
“You can pivot from that e-mail address into the AWS account, into the Cloudflare account”
Operation Glowing Symphony INVOLVES Email account compromise
The commander says that access to an email account is a common starting point for cyber-operations; Jack applies this possibility to Operation Glowing Symphony but does not establish it as a fully disclosed operation detail.
Uncertain Confidence 78% · Jack Rhysider EP 50 Details
“If Operation Glowing Symphony was getting into their e-mail accounts”
“It’s access to that e-mail account.”
Operation Glowing Symphony INVOLVES lateral movement
The operation involved moving through accounts, servers, and the network according to a rehearsed sequence of targets.
Explicit Confidence 97% · Jack Rhysider EP 50 Details
“They started moving through parts of the network, moving through accounts, moving through servers, moving through everything”
“They were pivoting and they were all dependent upon each other”
Operation Glowing Symphony COMPROMISES Domain controller
The operation planned to reach domain controllers as an initial foothold and later took over domain controllers during execution.
Explicit Confidence 96% · Jack Rhysider EP 50 Details
“Once you hit the domain controller, you’re good to go”
“taking over domain controllers”
Anonymous publicly declared a cyber war against ISIS and said it would take down ISIS sites, accounts, and email.
Explicit Direction flagged Confidence 99% · Anon EP 50 Details
“we started a cyber war on ISIS”
“ISIS, we will hunt you, take down your sites, accounts, e-mails”
Barack Obama OTHER Operation Glowing Symphony
President Barack Obama is stated to have signed Task Order 16-0063, authorizing Operation Glowing Symphony to proceed.
Explicit Confidence 99% · Jack Rhysider EP 50 Details
“Task Order 16-0063 was signed by President Barack Obama and Operation Glowing Symphony was a go”
Works mentioned in the transcript. Distinct from show-note sources.
Model gpt-5.6-luna · prompt 1.5.19 · schema 1.5.19 · 2026-09-13T06:09:53.544356+00:00