THE ROBIN HOOD VIRUS Screenplay Episode 3 "WORLD-WIDE MILITARY TACTICS" by Robert Nerbovig Series created by Robert Nerbovig a Turquoise Software expression therobinhoodvirus.com & dd214foundation.org Payson, Arizona 85541 solartoys@yahoo.com Learn more about the world of The Robin Hood Virus at www.therobinhoodvirus.com or www.wireart3d.com Distribution, sale, duplication, or any other unauthorized use of this material in whole or in part is strictly prohibited. Copyright 2025. All rights reserved. FADE IN: 1 INT. DARK SERVER ROOM – NIGHT                                                                               1 Rows of blinking servers hum in the darkness. We're inside a foreign intelligence agency's data center.                                               ARJAY (V.O.)                             When you have the power to secretly occupy any computer in the world,                             the question becomes: what do you do with that power? Digital code streams across a monitor. A command prompt appears, and a file begins downloading.                                               ARJAY (V.O.)                             Some would use it for personal gain. Others for destruction.                             We chose a different path. The screen flashes: "ACCESS GRANTED - DOWNLOADING INTELLIGENCE REPORT"                                               ARJAY (V.O.)                             We became the watchers of the watchers, the infiltrators of                             those who infiltrate, and the ultimate counter-intelligence                             operation that no one even knows exists. 2 INT. ROBIN HOOD VIRUS NETWORK OPERATIONS CENTER – NIGHT                                2 Our network operations center is located in an underground bunker (NOC) in the basement of a large log home (owned by the team leader) in Arizona's mountains on 5000 acres with 500 feet of lakefront property. ARJAY, the Robin Hood Virus team leader, sits at a central console, surrounded by multiple screens. Several team members work at stations around him.                                               ARJAY (V.O.)                             It started with a simple idea: enter the networks of those who                             threaten global security and monitor their activities. On a large screen, a world map shows multiple points of penetration across different countries.                                               ARJAY (V.O.)                             Russia. Iran. Japan. France. South Korea. Germany. Israel.                             All conducting cyber operations against American                             interests. All are now unknowingly hosting our virus. ARJAY turns to his team, a determined look in his eyes.                                               ARJAY                             We've got a new intercept from Moscow. Someone's                             planning something big. The team gathers around Arjay's station. PACO (50s, former military intelligence, disciplined) leans in to examine the data.                                               PACO                             Russian intelligence has been ramping up its infiltration                             efforts. This is the third major operation we've                             detected this month. PAULA (50s, cybersecurity expert, intense) points to another screen showing intrusion patterns.                                               PAULA                             They're not just after political intel anymore. These are                             economic targets. Tech firms, energy companies.                                               ARJAY                             They're stealing Intellectual Property. Competitive advantages.                             Anything to help Russian industries maintain an edge. ROB (50s, brilliant hacker, linguist, casual demeanor) rolls his chair over, tapping on a tablet.                                               ROB                             I've been tracking their access points. They've compromised                             networks in twelve countries already.                                               ARJAY (V.O.)                             Because we can secretly occupy any computer in the world,                             it becomes critical that we establish an internal department                             of military tactical information.                                               ARJAY                             Let's isolate their command structure.                             See who's giving the orders. Arjay pulls up files on another screen showing the organizational structure of Russian intelligence operations.                                               ARJAY (V.O.)                             We enter the computer networks of countries that may be a threat                             to the security of the United States and the world.                             Russia is just the beginning. 3 INT. ROBIN HOOD VIRUS NETWORK OPERATIONS CENTER – DAY                                    3 The team sits around a large table. On the wall screen is a detailed map of global cyber threats. Each country is coded by threat level.                                               ARJAY                             Let's do a threat assessment update. PACO, start with Russia.                                               PACO                             (pointing to the screen)                             The Russian government has been spying on hundreds of American,                             European, and Asian companies. It's the first time we've                             definitively linked Moscow to cyber-attacks for economic                             rather than political gains.                                               PAULA                             Their targets are primarily energy and technology firms.                             Many have already lost valuable intellectual property.                                               ARJAY                             What's their motivation?                                               PACO                             From what we've gathered, these attacks appear to be motivated                             by the Russian government's interest in helping its industry                             maintain competitiveness in key areas of national importance.                                               ARJAY                             And Iran? ROB pulls up another section of data, showing Iranian attack vectors.                                               ROB                             Iran is responsible for a wave of computer attacks on US                             corporations, primarily targeting oil, gas,                             and electricity companies.                                               PAULA                             Based on intelligence we've intercepted, their goal is                             sabotage rather than espionage.                                               PACO                             These cyber-attacks are attempts to gain control of critical                             processing systems. If successful, they could cause serious                             infrastructure damage.                                               ARJAY                             Let's move east. Japan? ROB brings up information on Japanese intelligence operations.                                               ROB                             The Japanese have mounted a comprehensive economic espionage and                             intelligence collection effort directed against the United States.                                               PACO                             Because Japan has a very small government intelligence                             organization, most intelligence is collected by                             Japanese companies in coordination with their Ministry                             of International Trade and Industry.                                               PAULA                             Major Japanese multinational corporations like Mitsubishi,                             Hitachi, and Matsushita maintain large corporate intelligence                             organizations collecting political and economic intelligence. ARJAY looks thoughtful, processing the information.                                               ARJAY                             What about the Japanese External Trade Organization?                                               PACO                             JETRO has been used as an intelligence asset. They collect                             information and even support espionage activities. ARJAY stands, pacing as he thinks.                                               ARJAY                             We've established monitoring in all these networks,                             but we need to go deeper. We need to anticipate their next moves.                                               ARJAY (V.O.)                             We will actively enter the networks and monitor these                             and other countries' computer systems for possible hacking                             efforts against U.S. installations. 4 INT. ROBIN HOOD VIRUS NETWORK OPERATIONS CENTER – LATER                                4 Arjay is alone at his workstation. The lights are dimmed. He's examining data from multiple intelligence agencies simultaneously.                                               ARJAY (V.O.)                             We will monitor various hackers to intercept the theft of                             commercial data and prevent viruses from being introduced into                             domestic computer systems to prevent the sabotage of our operations. A notification pops up on his screen: "FOREIGN INTELLIGENCE ACCESS DETECTED" Arjay quickly traces the intrusion to a server in Eastern Europe. He watches in real-time as hackers attempt to penetrate a U.S. defense contractor's network.                                               ARJAY                             (into his comms)                             Team, we've got a live one. Foreign operation attempting to access Lockheed's secure servers. 5 INT. ROB'S LOG HOME ON ARJAY’S RANCH – NIGHT                                                       5 ROB is at his desk, instantly connecting to the system remotely. His office is cluttered, but his work setup is immaculate.                                               ROB                             I see them. They're using a sophisticated backdoor to exploit                             Russian signatures. INTERCUT WITH: 6 INT. PAULA'S OFFICE UPSTAIRS IN ARJAYS LOG HOME- NIGHT                                        6 PAULA is also connecting remotely, with multiple monitors showing code and network traffic.                                               PAULA                             They're after the new missile guidance system specs. Trying to                             download the technical documentation. 7 INT. ROBIN HOOD VIRUS NETWORK OPERATIONS CENTER – NIGHT                                7 Arjay's fingers fly across the keyboard.                                               ARJAY                             I'm creating a mirror system. Let them think they're getting the real data.                                               ROB (V.O.)                             Substituting false specs?                                               ARJAY                             Better. I'm giving them outdated information. Stuff that's already                             been declassified but isn't widely known. They'll think                             they hit gold, but it won't actually compromise anything.                                               PAULA (V.O.)                             Smart. They won't suspect it's fake.                                               ARJAY (V.O.)                             We don't just watch. Sometimes we intervene. Carefully. Invisibly.                             Leaving no trace of our existence while protecting                             vital national interests. Arjay executes his plan. We watch as the Russian hackers download what they think is valuable intelligence, but it is a carefully crafted deception.                                               ARJAY                             (satisfied)                             And that's how you run a counter-intelligence operation without                             anyone knowing you exist. FADE IN: 8 INT. ROBIN HOOD VIRUS NETWORK OPERATIONS CENTER – NIGHT                                8 The team is back together. A new day, new threats. PACO is presenting a briefing on foreign intelligence services.                                               PACO                             Let's continue our global threat assessment. France. A dossier appears on screen showing French intelligence activities.                                               PACO                             The French General Directorate of External Security, DGSE, has                             targeted U.S. economic and proprietary data since at least 1964.                             Their top priorities are combating terrorism and collecting                             economic intelligence.                                               PAULA                             Service 7 of the DGSE has successfully conducted technical operations                             against telecommunications systems throughout the world and has                             gathered significant data through these activities.                                               ROB                             We've confirmed reports that the DGSE targeted Loral Space                             Systems and Hughes Aircraft for information on telecommunications                             satellite technology.                                               PACO                             They've also gone after Lockheed for data on the MILSTAR military                             communications satellite system, TRW for military                             telecommunications technologies, and GTE for                             microwave technologies.                                               ARJAY                             What about South Korea? ROB pulls up information on South Korean intelligence activities.                                               ROB                             The South Korean government and businesses have conducted                             operations directed at collecting U.S. economic and proprietary data.                                               PAULA                             They've centered their collection efforts on computer systems,                             aerospace technologies, and nuclear technologies.                                               PACO                             According to Defense Intelligence Agency reports we've intercepted,                             South Korean activities have included stealing information from                             computerized databases maintained by U.S. government agencies                             and companies.                                               ARJAY                             And Germany? PAULA brings up information on German intelligence operations.                                               PAULA                             Germany has been accused of using computer intrusion techniques and                             SIGINT to gather information on foreign competitors, which is then                             passed on to German companies.                                               ROB                             We don't have indications of a human intelligence effort against United States                             corporations. However, German trade officers are likely                             collecting economic intelligence through open-source analysis.                                               PACO                             The German Federal Intelligence Service, the BND,                             is alleged to have created a classified computer                             intelligence facility outside Frankfurt designed to                             permit intelligence officers to enter data networks and                             databases from countries around the world.                                               PAULA                             This program, code-named Project RAHAB, has reportedly                             accessed computers in Russia, the United States, Japan, France,                             Italy, and the United Kingdom. ARJAY stands, contemplating the scale of global cyber espionage.                                               ARJAY                             And finally, Israel?                                               PACO                             Israel has an active program to gather proprietary information                             within the United States. These collection activities are primarily                             directed at obtaining information on military systems and advanced                             computing applications.                                               ROB                             They can use this in Israel's sizable armaments industry.                                               PAULA                             Two primary activities have conducted espionage within the                             United States: MOSSAD and LAKAM, the Scientific Affairs                             Liaison Bureau of the Defense Ministry.                                               PACO                             The Israelis use classic HUMINT techniques, SIGINT, and computer                             intrusion to gain economic and proprietary information. ARJAY paces thoughtfully.                                               ARJAY                             So we've got every major power conducting cyber operations against                             the U.S. and each other. A digital cold war that most people                             don't even know exists.                                               ARJAY (V.O.)                             We will search for and gather all information regarding                             commercial imagery, radar imagery, electro-optical imagery,                             multispectral imagery... the tools of modern                             intelligence gathering.                                               ARJAY                             What's our strategy to monitor all these threats simultaneously?                                               PACO                             We've established persistent access to their intelligence                             networks. We're capturing their collection requirements, their                             processing methods, their production cycles.                                               PAULA                             We're basically monitoring the entire intelligence cycle:                             planning and direction, collection, processing, production,                             and dissemination.                                               ROB                             (typing rapidly)                             I've created algorithms to flag activities of interest automatically.                             When they target specific U.S. assets, we'll know immediately.                                               ARJAY                             Good. But we need to do more than just watch. We need to protect. 9 INT. ROBIN HOOD VIRUS NETWORK OPERATIONS CENTER – DAY                                    9 Arjay and PAULA inspect a new set of servers being installed.                                               PAULA                             These will triple our processing capacity. We'll be able to monitor                             more networks simultaneously.                                               ARJAY                             And they're completely isolated from the internet?                                               PAULA                             Multiple air gaps. The only way in or out is through                             our secure protocols.                                               ARJAY (V.O.)                             We've established various security tests to determine the                             subject of the information, the level of importance, and which                             department should have this information.                                               ARJAY                             What about our communication channel with the authorities?                                               PAULA                             Still secure. They have no idea who we are, just that we                             provide accurate intelligence.                                               ARJAY                             And they still want more.                                               PAULA                             They're addicted to our intel. Wouldn't know what to                             do without it now.                                               ARJAY                             That's how I want it. Dependent on us, but never able to find us. 10 INT. ROBIN HOOD VIRUS NETWORK OPERATIONS CENTER – DAY                                10 PACO is reviewing intelligence reports when Arjay approaches.                                               ARJAY                             Got a minute?                                               PACO                             Always. What's up?                                               ARJAY                             I've been thinking about our INSCOM connection.                             How secure is it really?                                               PACO                             About as secure as it gets. They receive our intelligence,                             verify it, but have no way to trace it back to us.                                               ARJAY                             And they're putting the information to good use?                                               PACO                             Very good use. The intel we provided on those Iranian hackers                             last month led to a major counter-operation. Saved a lot of                             critical infrastructure from potential sabotage.                                               ARJAY (V.O.)                             We have setup a U.S. Government communication channel that does                             not know our identity. We've sent numerous pieces of information that                             they have verified to be true, and they've welcomed our continued                             forwarding of information.                                               ARJAY                             What about the money?                                               PACO                             The diversion total is up to $207,500,000.                             Donations currently stand at $195,000,000.                                               ARJAY                             That's $12.5 million for our operations. We need to increase the                             donation ratio. I want at least 95% going to the causes we support.                                               PACO                             We're already running lean, Arjay. This operation isn't cheap.                                               ARJAY                             I know. But we didn't create this to get rich. We created it to                             make a difference.                                               PACO                             (nodding)                             I'll see where we can trim expenses. FADE IN: 11 INT. ROBIN HOOD VIRUS NETWORK OPERATIONS CENTER – DAY                                11 ROB is tracking an unusual pattern of activity on his screens. He calls Arjay over.                                               ROB                             You need to see this. We've detected a massive data collection                             operation targeting U.S. technologies on the National Critical                             Technologies List. Arjay examines the screen, concern growing on his face.                                               ARJAY                             Who's behind it?                                               ROB                             That's the interesting part. It's a coordinated effort. Multiple                             countries, working independently but targeting the same technologies.                                               ARJAY                             Show me what they're after. ROB brings up a list of targeted technologies.                                               ROB                             Composite materials, automated and robotic production                             technologies, telecommunications systems, lasers and                             power systems, biomedical technologies, advanced electronic                             devices, aerospace structures...                                               ARJAY                             They're going after everything on the Militarily Critical                              Technologies List.                                               PAULA                             (joining them)                             It's like they're dividing up the work. Russia takes one sector,                             China another, Iran something else...                                               PACO                             (approaching)                             A distributed espionage network. Smart. Makes it harder                             to track and defend against.                                               ARJAY                             This is a coordinated attack on U.S. technological superiority.                             If they succeed, America loses its edge in every critical field.                                               ARJAY (V.O.)                             The importance of proprietary information concerning                             advanced technologies to the future of the United States has                             been recognized in both the National Critical Technologies                             List published by the Department of Commerce and the                             Militarily Critical Technologies List published by the                             Department of Defense.                                               PACO                             What's the play here? Do we alert INSCOM?                                               ARJAY                             Not yet. First, we need to understand the full scope. ROB, can                             you identify all the players?                                               ROB                             Working on it. So far I've confirmed Russia, China, Iran,                             North Korea, and possibly elements within allied countries                             operating without official sanction.                                               PAULA                             They're primarily using computer intrusion, telecommunications                             targeting and interception, and exploitation of weak private                             sector encryption systems.                                               ARJAY                             According to what we've learned from NACIC, these activities account                             for the largest part of economic and industrial information                             lost by U.S. corporations.                                               PACO                             Telecommunications are particularly vulnerable,                             especially international telecommunications. They provide a                             lucrative and extremely vulnerable source for anyone interested                             in obtaining economic or proprietary data. ARJAY paces, thinking intensely.                                               ARJAY                             We need to do more than just report this. We need to actively counter it.                                               ROB                             How? We're not supposed to leave traces of our presence.                                               ARJAY                             We won't. But we can create a system to identify the most                             critical intelligence being targeted and selectively corrupt                             that data as it's being stolen.                                               PAULA                             A subtle corruption. Just enough to make the intelligence                             worthless, but not obvious enough that they know they're                             being countered.                                               PACO                             That's risky, Arjay. We've never actively interfered at                             this scale before.                                               ARJAY                             The stakes are too high not to. This isn't just about stealing                             business secrets anymore. This is about undermining the                             technological foundation of national security.                                               ARJAY (V.O.)                             We've set up a U.S. Government communication channel that does not                             know our identity. We have sent numerous pieces of information                             that they have verified to be true and have welcomed our continued                             forwarding of information concerning people, places, activities,                             I.P. addresses of major hackers, foreign military plans                             and activity, individuals we have identified as terrorists                             and their location and activities.                                               ARJAY                             Let's start implementing countermeasures. PAULA, develop a system                             to identify the most critical technologies being targeted. ROB,                             create subtle corruption protocols that will trigger when this                             data is being exfiltrated. PACO, prepare a comprehensive                             briefing for INSCOM, but keep our counter-operations out of it. The team immediately gets to work, a new sense of urgency in their movements. 12 INT. ROBIN HOOD VIRUS NETWORK OPERATIONS CENTER – NIGHT                             12 Arjay is alone, reviewing the day's developments. On his screen is a summary of the team's Robin Hood activities: money diverted, causes supported, intelligence provided to authorities.                                               ARJAY (V.O.)                             Diversion total to date: $207,500,000.                             Donation total to date: $195,000,000. He pulls up images of humanitarian projects funded through their donations: hospitals being built in developing countries, clean water systems, schools, and disaster relief.                                               ARJAY                             (to himself)                             This is why we do what we do. A notification pops up on his screen: "POTENTIAL COUNTER-DETECTION ALERT" Arjay immediately focuses, typing rapidly to investigate the alert. 13 INT. ROBIN HOOD VIRUS NETWORK OPERATIONS CENTER – NIGHT                             13 Arjay rushes in, finding ROB already working on the alert.                                               ARJAY                             What have we got?                                               ROB                             Someone's looking for us. Not directly, but they're investigating                             the pattern of intelligence the U.S. government has been receiving.                                               ARJAY                             Who?                                               ROB                             Not sure yet. They're good. Really good at covering their tracks. PAULA and PACO enter, alerted by the emergency notification.                                               PAULA                             Is our INSCOM channel compromised?                                               ROB                             No, but someone's putting together the pieces. They've noticed                             that highly accurate intelligence has been appearing from an                             unknown source.                                               PACO                             FBI? CIA? NSA?                                               ROB                             (shaking his head)                             None of the above. This is... different.                                               ARJAY                             Another player. Someone we haven't identified yet.                                               ROB                             Whoever they are, they're searching for patterns in the intelligence                             community that might lead them to us.                                               ARJAY                             Can they find us?                                               ROB                             Not directly. But they might be able to identify our                             method of communication with INSCOM.                                               ARJAY                             Then we need to change it. Establish a new protocol. And we need                             to find out who's looking for us.                                               PACO                             I'll work on creating a new communication channel.                                               PAULA                             I'll help ROB trace whoever is investigating us.                                               ARJAY                             Be careful. If they're sophisticated enough to detect our pattern,                             they're sophisticated enough to notice us looking back at them.                                               ARJAY (V.O.)                             Our communications channel is with INSCOM. INSCOM oversees                             several major subordinate commands and coordinates efforts                             between various command groups to gather and best use the                             information received.                                               ARJAY                             Let's increase security protocols across the board.                             And accelerate our investigation into this coordinated technology theft. I want to know who's                             behind it and what they're planning to do with all that                             stolen intelligence. The team disperses, each to their assigned task. Arjay remains in the center of the room, staring at the global threat map, his expression determined but concerned. FADE IN: 14 INT. ROBIN HOOD VIRUS NETWORK OPERATIONS CENTER – DAY                                14 The team is gathered for an urgent meeting. On the main screen is a complex diagram showing connections between various intelligence agencies, corporations, and unknown entities.                                               ARJAY                             What have we learned?                                               PAULA                             The entity searching for us isn't a government agency.                             At least not officially.                                               ROB                             Based on their digital fingerprint, they appear to be a private                             intelligence contractor with government connections.                                               PACO                             We believe they've been tasked with identifying the source of the                             intelligence that's been flowing into INSCOM.                                               ARJAY                             Do we have a name?                                               PAULA                             They're extremely careful, but we've tracked some                             of their operations to a company called Sentinel Analytics. ROB brings up information on Sentinel Analytics.                                               ROB                             On the surface, they're a cybersecurity consultancy.                             In reality, they do black-box operations for various intelligence                             agencies. Plausible deniability.                                               ARJAY                             So someone inside the government doesn't trust the intelligence                             we're providing and wants to know where it's coming from.                                               PACO                             Likely scenario, yes.                                               ARJAY                             Have we successfully changed our communication protocol?                                               PACO                             Yes. The new channel is active. Multiple layers of encryption and                             routing through a series of dead drops. Even if they were close                             to finding our old method, they're back to square one now.                                               ARJAY                             Good. And the coordinated technology theft?                                               PAULA                             We've mapped most of the operation. It's even more extensive                             than we initially thought. She brings up a new set of diagrams showing infiltration points across global networks.                                               PAULA                             They're targeting over 200 different technology applications                             from the MCTL across fifteen major technology groups.                                               ROB                             We've identified collection operations focusing on composite                             materials, alloys, superconductive conductors, automated and                             robotic production technologies, telecommunications                             transmission and networking...                                               PACO                             Plus lasers, optics and power systems, biomedical technologies,                             advanced electronic devices, aerospace structures and                             propulsion systems.                                               ARJAY                             They're going after everything. The entire                             technological foundation of U.S. military and economic superiority.                                               ARJAY (V.O.)                             The MCTL incorporates all of the technologies listed in the                             National Critical Technologies List and includes additional                             technologies that have military significance. It provides an                             all-encompassing view of the range of technologies that are                             considered essential to the security of the United States.                                               PAULA                             Our countermeasures are already having an effect. We've                             managed to corrupt approximately 30% of the sensitive data                             they're targeting.                                               ROB                             But they're persistent. And they keep changing their approach                             when one method fails.                                               ARJAY                             What about our INSCOM report?                                               PACO                             It's ready. Comprehensive breakdown of the operation, all the                             major players, their targets, and methods.                                               ARJAY                             But nothing about our countermeasures or Sentinel Analytics.                                               PACO                             Nothing. As far as INSCOM will know, this is just another                             intelligence report from their anonymous source.                                               ARJAY                             Good. Send it through the new channel. Let's see how they respond. 15 INT. PENTAGON - INSCOM HEADQUARTERS – DAY                                                       15 A secure conference room. Several military intelligence officers are reviewing the report sent by Arjay's team. COLONEL DAVIDSON (50s, career intelligence officer) studies the data with grave concern.                                               COLONEL DAVIDSON                             This is the most comprehensive breakdown of foreign technology theft                             I've ever seen. Our anonymous source continues to impress.                                               MAJOR REYNOLDS                             (40S, CYBERSECURITY SPECIALIST)                             The level of detail is remarkable. Down to specific IP addresses                             and infiltration methods.                                               COLONEL DAVIDSON                             And you've verified the information?                                               MAJOR REYNOLDS                             What we can, yes. It aligns perfectly with what we've been                             able to independently confirm.                                               COLONEL DAVIDSON                             What about this new communication channel? Any idea why they changed it?                                               MAJOR REYNOLDS                             (hesitant)                             No, sir. It just appeared. The old one went dark.                                               COLONEL DAVIDSON                             Interesting timing, considering we just contracted Sentinel Analytics                             to try to locate the source.                                               MAJOR REYNOLDS                             You think they know about that?                                               COLONEL DAVIDSON                             I think whoever is providing this intelligence has capabilities                             that exceed what we've been assuming. The question is,                             what's their agenda?                                               MAJOR REYNOLDS                             They've never asked for anything in return. And every piece of                             intelligence they've provided has proven accurate.                                               COLONEL DAVIDSON                             Everyone has an agenda, Major. We just haven't figured out theirs yet. 16 INT. ROBIN HOOD VIRUS NETWORK OPERATIONS CENTER – NIGHT                              16 Arjay is watching the INSCOM meeting through a secure feed they've established in the Pentagon's systems.                                               ARJAY                             They're suspicious, but they need our intelligence too much                             to push back.                                               PACO                             (joining him)                             That's the sweet spot. Valuable enough to be indispensable,                             mysterious enough to keep them guessing.                                               ARJAY                             For now. But this Sentinel Analytics complicates things. If they                             keep digging, they might eventually find something.                                               PACO                             What do you want to do about them? ARJAY considers for a moment.                                               ARJAY                             Let's turn the tables. If they're investigating us, we'll investigate                             them. I want to know who they are, who they report to,                             and what they know about us so far.                                               PACO                             I'll get the team on it.                                               ARJAY                             Let's accelerate our counterintelligence operation against                             technology theft. We need a win to keep INSCOM convinced of our value.                                               ARJAY (V.O.)                             Information gathered through US Army military intelligence                             efforts can be used for political negotiations and treaties                             between the U.S. and other nations, as well as for advising political                             leaders on better understanding world military actions. 17 INT. ROBIN HOOD VIRUS NETWORK OPERATIONS CENTER – NIGHT                             17 ROB is tracking multiple infiltration attempts in real-time. He notices something unusual.                                               ROB                             (calling out)                             Hey, I think I found something! The team gathers around his station.                                               ROB                             I've been monitoring the Russian intelligence network, specifically                             their operations targeting U.S. aerospace propulsion systems.                                               PAULA                             That's one of the most critical technologies on the MCTL.                                               ROB                             Exactly. And I just caught them in the act of exfiltrating data                             from a defense contractor working on the next generation                             of hypersonic propulsion.                                               ARJAY                             Our countermeasures?                                               ROB                             It's in place and working. They think they're getting the real                             blueprints, but we've subtly altered key specifications, enough to                             make anything they build from these plans fail                             catastrophically in testing.                                               PACO                             Without them knowing the data was compromised.                                               ROB                             Exactly. But here's the interesting part. I traced where they're                             sending the data after collection. He pulls up a map showing the data's destination.                                               ROB                             It's not going to Russian military intelligence.                             It's being routed to a third party.                                               ARJAY                             Who?                                               ROB                             That's just it. The signature matches some of the operations                             run by Sentinel Analytics. Stunned silence as the team processes this information.                                               PAULA                             Are you saying Sentinel Analytics is working with the Russians?                                               ROB                             Not necessarily. But they're somehow intercepting the same data.                             Either they're monitoring Russian intelligence operations...                                               PACO                             Or is there something we haven't considered yet?                                               ARJAY                             A third player in the game. With their own agenda.                                               ARJAY (V.O.)                             The information can also be used on a battlefield to allow                             soldiers to better understand where potential attacks may come from,                             or to be better aware of their surroundings during an attack.                                               ARJAY                             This just got a lot more complicated. We need to understand who                             Sentinel Analytics really is before they get any closer to finding us. The team exchanges concerned looks as we... FADE TO BLACK FADE IN: 18 INT. ROBIN HOOD VIRUS NETWORK OPERATIONS CENTER – MORNING                        18 The team has been working through the night. Coffee cups and energy drink cans litter the workstations. Arjay stands at the center console, reviewing new information on Sentinel Analytics.                                               ARJAY                             What have we found?                                               PAULA                             Sentinel Analytics is more than a private intelligence contractor.                             It has connections to multiple intelligence agencies worldwide.                                               ROB                             Their digital footprint suggests they operate in a gray                             zone - not officially sanctioned, but not exactly rogue either.                                               PACO                             A public-private partnership that gives governments                             plausible deniability.                                               ARJAY                             And their interest in our intelligence pipeline to INSCOM?                                               PAULA                             We've intercepted communications suggesting they were contracted                             specifically to identify the source of INSCOM's anonymous intelligence.                                               PACO                             But that's not all they're doing.                                               ARJAY                             The Russian aerospace data. ROB nods, pulling up network traffic analysis on his screen.                                               ROB                             They're intercepting intelligence from multiple foreign                             agencies, not just Russia. They seem to be building their own                             repository of stolen technology data.                                               ARJAY                             Skimming from the skimmers.                                               PAULA                             Exactly. They're letting foreign intelligence services do the                             hard work of stealing the data, then intercepting it during transit.                                               PACO                             Efficient. And it keeps their hands clean. ARJAY paces, thinking through the implications.                                               ARJAY                             So we have a third player who's aware of our activities, hunting                             for our identity, and simultaneously exploiting the same                             foreign intelligence operations we're monitoring.                                               ARJAY (V.O.)                             This type of US Army military intelligence is often gathered by                             intelligence personnel specially trained in intelligence                             gathering techniques.                                               ARJAY                             We need to know who they're working for and what they plan to do                             with the technology data they're collecting.                                               PACO                             I may have something on that front. He brings up financial records on the main screen.                                               PACO                             Sentinel Analytics is owned by a holding company called                             Prometheus Ventures. And Prometheus Ventures has received                             substantial funding from several defense contractors.                                               PAULA                             They're working for the military-industrial complex?                                               PACO                             Not officially. But there's a money trail suggesting                             they're providing services to private sector companies that have government contracts.                                               ROB                             So they could be helping these companies get ahead by stealing                             intelligence that the foreign services already stole from                             American companies.                                               ARJAY                             A technological ouroboros. The snake eating its own tail.                                               ARJAY (V.O.)                             Obtaining threat assessment information is critical. Information                             can be obtained through several sources within the                             United States Government.                                               ARJAY                             This complicates things. If they're helping American                             companies recover stolen intelligence, they're technically                             on "our side" - but they're also hunting us.                                               PACO                             And we don't know what they'll do if they find us.                                               PAULA                             What's our next move? ARJAY considers carefully before responding.                                               ARJAY                             We let them get a little closer.                                               ROB                             (surprised)                             What? Why would we do that?                                               ARJAY                             Because understanding their capabilities and intentions is the                             best way to protect ourselves. And because we might be able to use them.                                               PACO                             Use them how?                                               ARJAY                             If they're already working to recover stolen American technology,                             they might make better allies than enemies.                                               PAULA                             That's risky. We've stayed hidden for a reason.                                               ARJAY                             I'm not suggesting we reveal ourselves. Just that we might                             strategically lead them toward mutual interests without compromising our operation. ARJAY walks to the main console and brings up the global threat map.                                               ARJAY                             For now, we continue our primary mission. Countering the coordinated                             technology theft and providing intelligence to INSCOM. But we'll                             leave some breadcrumbs for Sentinel Analytics.                             See where they go with them. 19 INT. SENTINEL ANALYTICS HEADQUARTERS - DAY                                                       19 A sleek, modern office space with high security. DIRECTOR ELEANOR CHEN (50s, calculating, elegant) reviews data with her team of analysts.                                               CHEN                             Our anonymous intelligence source has changed their                             communication protocol. Right when we were getting close. ANALYST FISHER (30s, technical, intense) They must have detected our investigation.                                               CHEN                             Which means they have access to information they shouldn't.                             Possibly within INSCOM itself.                                               FISHER                             A security breach?                                               CHEN                             Or extraordinary capabilities. Either way, they're not                             what we initially thought.                                               FISHER                             A foreign intelligence service?                                               CHEN                             No. Their intelligence primarily protects American interests. And they're too careful, too sophisticated.                                               FISHER                             Then who?                                               CHEN                             That's what we need to find out. Because whoever they are, they're                             sitting on intelligence capabilities that rival or exceed our own.                             And they're operating completely off the grid. Chen examines a diagram showing the web of connections they've mapped so far.                                               CHEN                             Have we made progress tracking their new communication channel?                                               FISHER                             Some. There are multiple layers of encryption and routing, but                             we've identified potential nodes in their network.                                               CHEN                             Focus our resources there. And increase our monitoring of the                             coordinated technology theft operation. If they're still watching                             that, we might catch a glimpse of them in action. 20 INT. ROBIN HOOD VIRUS HEADQUARTERS - NIGHT                                                      20 Arjay and the team monitor Sentinel Analytics' activities in real-time.                                               ARJAY                             They took the bait. They're focusing on the nodes we wanted                             them to find.                                               PAULA                             While completely missing our actual communication channel.                                               PACO                             They're good, but not as good as us.                                               ROB                             (monitoring his screen)                             Heads up. We've got a major infiltration attempt in progress.                             Chinese intelligence targeting quantum computing research at MIT.                                               ARJAY                             Part of the coordinated technology theft?                                               ROB                             Signatures match. Same operation, different target.                                               ARJAY                             Let's watch how they do it. Then implement our countermeasures. The team observes as Chinese hackers utilize a sophisticated multi-stage attack to penetrate MIT's secure research servers.                                               PAULA                             They're using a zero-day exploit that shouldn't even exist yet.                                               PACO                             Someone on the inside must have leaked it.                                               ROB                             They're in. Accessing the quantum algorithm research now.                                               ARJAY                             Implement countermeasures. Corrupt the data as it's being exfiltrated.                                               ROB                             On it. As the Chinese hackers download what they think is                             valuable quantum computing research, ROB's system subtly alters                             key mathematical formulas and parameters.                                               ARJAY                             Good. Now let's see if our friends at Sentinel Analytics                             are watching too.                                               PAULA                             (monitoring another screen)                             They are. They've detected the Chinese operation and are                             tracking the data as it moves.                                               PACO                             Should we let them intercept the clean data or the corrupted version? Arjay thinks for a moment.                                               ARJAY                             Let them get the clean data. But make sure they know it was almost                             stolen. Let's see what they do with it. 21 INT. SENTINEL ANALYTICS HEADQUARTERS - SAME TIME                                            21 Chen and her team are also monitoring the Chinese infiltration.                                               FISHER                             They've breached MIT's quantum computing lab. Downloading                             research data now.                                               CHEN                             Are they getting everything?                                               FISHER                             No. Something's interfering with their download.                             Parts of the data are being corrupted during transmission.                                               CHEN                             Our anonymous friends at work again. Intercept the                             uncorrupted data before it can be altered.                                               FISHER                             Already on it. We're capturing the clean data stream.                                               CHEN                             Where will the Chinese send it once they have it?                                               FISHER                             Based on previous patterns, it will be routed through servers                             in Singapore before reaching Beijing.                                               CHEN                             Good. Let's follow it all the way. And see if we can catch a                             glimpse of whoever is corrupting their stolen data. 22 INT. ROBIN HOOD VIRUS NETWORK OPERATIONS CENTER – CONTINUOUS                    22 Arjay watches Sentinel's activities with growing interest.                                               ARJAY                             They're intercepting the clean data as expected. But they're                             also trying to trace our countermeasures.                                               PAULA                             Should we hide our tracks more thoroughly?                                               ARJAY                             No. Let them see just enough to pique their interest,                             but not enough to find us.                                               ARJAY (V.O.)                             These agencies are responsible for protecting U.S. government                             and commercial activities, and executing counterintelligence                             programs, security education, or threat analysis.                                               ARJAY                             Now let's see what they do with the quantum computing data.                                               ROB                             You think they'll return it to MIT?                                               ARJAY                             That would be the ethical thing to do. But I suspect they have other plans. The team watches as Sentinel Analytics secures the intercepted data and begins analyzing it.                                               PACO                             They're not returning it. They're studying it themselves.                                               PAULA                             And they're preparing a report for someone. ROB zooms in on a document being prepared at Sentinel.                                               ROB                             It's addressed to Prometheus Ventures and...                             Quantum Innovations Inc.                                               ARJAY                             A private sector quantum computing company. They're giving the                             stolen research to a commercial entity.                                               PACO                             So they're not just recovering stolen American technology. They're                             redirecting it to their corporate sponsors.                                               ARJAY                             Which means they're not exactly white knights. They're profiteers.                                               PAULA                             What does this mean for us?                                               ARJAY                             It means we need to be extremely careful. Sentinel Analytics isn't                             just a threat to our secrecy - they're potentially undermining                             the very technological protection we're trying to provide.                                               ARJAY (V.O.)                             Federal Bureau of Investigation has primary responsibility for                             counterintelligence investigations within the                             United States and can provide a variety of support services                             and classified analytical products to Government agencies.                                               ARJAY                             Let's compile everything we know about Sentinel Analytics,                             Prometheus Ventures, and their corporate connections.                             We need to understand exactly who we're dealing with. 23 INT. PENTAGON - INSCOM HEADQUARTERS - DAY                                                        23 Colonel Davidson meets with his team to discuss new intelligence received from Arjay's operation.                                               COLONEL DAVIDSON                             Our anonymous source has provided detailed information                             on a Chinese attempt to steal quantum computing research from MIT.                                               MAJOR REYNOLDS                             And they say the attempt was partially successful, despite                             countermeasures that corrupted some of the data.                                               COLONEL DAVIDSON                             Any mention of how these countermeasures were implemented?                                               MAJOR REYNOLDS                             No, sir. The report simply states that the data was corrupted                             during transmission.                                               COLONEL DAVIDSON                             Interesting. Our source seems to know about these countermeasures,                             but doesn't claim responsibility for them.                                               MAJOR REYNOLDS                             Do you think they're responsible?                                               COLONEL DAVIDSON                             It would be consistent with their capabilities. What about Sentinel                             Analytics? Any progress on identifying our source?                                               MAJOR REYNOLDS                             They report finding fragments of the communication network, but                             nothing conclusive. Whoever is providing this intelligence has                             exceptional operational security.                                               COLONEL DAVIDSON                             Maybe too exceptional. I'm beginning to wonder if we should be                             concerned about our anonymous benefactor.                                               MAJOR REYNOLDS                             Sir, every piece of intelligence they've provided has checked out.                             They've helped us prevent numerous foreign intrusions.                                               COLONEL DAVIDSON                             I know. But an entity with these capabilities operating completely                             outside official channels... it's unprecedented.                                               MAJOR REYNOLDS                             What do you want to do?                                               COLONEL DAVIDSON                             For now, we continue to use their intelligence. It's too valuable                             to ignore. But I want Sentinel Analytics to dig deeper.                             Find out who they are and what they really want. 24 INT. ROBIN HOOD VIRUS HEADQUARTERS - NIGHT                                                      24 Arjay gathers the team for an update on their investigation of Sentinel Analytics.                                               ARJAY                             We've mapped Sentinel Analytics' complete corporate structure.                             They're a subsidiary of Prometheus Ventures, which is                             majority-owned by three defense contractors and two                             technology companies.                                               PACO                             Their board includes former intelligence officials from CIA, NSA,                             and military intelligence.                                               PAULA                             They have contracts with multiple government agencies and                             private companies for what they call                             "intelligence recovery services."                                               ROB                             And they've been specifically tasked by INSCOM to find us.                                               ARJAY                             So we're dealing with a quasi-governmental entity with private                             sector backing, staffed by intelligence professionals, with                             a direct mandate to uncover our operation.                                               PACO                             That about sums it up.                                               ARJAY                             And what have we learned about their methods?                                               PAULA                             They're sophisticated. Multiple layers of security,                             compartmentalized operations, top-tier cyber capabilities.                                               ROB                             But they're not as invisible as they think they are. I've mapped                             several of their operations, including intelligence gathering                             activities that go well beyond their official mandate.                                               ARJAY                             Such as?                                               ROB                             They're not just recovering stolen American technology. They're                             collecting intelligence on foreign technologies too. And they                             appear to be selectively sharing what they find with their                             corporate sponsors.                                               ARJAY                             Industrial espionage under the guise of counter-intelligence.                                               PACO                             Exactly. And INSCOM either doesn't know or doesn't care                             as long as they get results. ARJAY considers this information carefully.                                               ARJAY (V.O.)                             An integral part of the FBI's counterintelligence efforts is the                             Development of Espionage, Counterintelligence and Counter-terrorism                             Awareness program. DECA is the FBI's medium for providing foreign                             intelligence threat information—especially information concerning                             economic espionage—to the private sector.                                               ARJAY                             This changes our approach. Sentinel Analytics isn't just a threat                             to our security. They're potentially undermining the very                             protection of critical technologies we're trying to achieve.                                               PAULA                             What's our next move?                                               ARJAY                             We need to bring this to INSCOM's attention. But we need to                             do it carefully.                                               PACO                             If we expose Sentinel Analytics, we risk exposing ourselves.                                               ARJAY                             Not if we do it right. We'll provide INSCOM with evidence of                             Sentinel's selective sharing of recovered intelligence with                             private companies. Let them draw their own conclusions.                                               ROB                             And if they don't act on it?                                               ARJAY                             Then we may need to take more direct action.                                               ARJAY (V.O.)                             The Defense Intelligence Agency is a combat support agency and the                             senior military component in the U.S. Intelligence Community.                             It provides intelligence in support of joint military operations                             in peacetime, crisis, contingency, and combat.                                               ARJAY                             But first, let's continue our primary mission. The coordinated                             technology theft operation is still ongoing, and it's still                             the biggest threat to U.S. technological superiority. 25 INT. ROBIN HOOD VIRUS NETWORK OPERATIONS CENTER – MORNING                         25 The team is monitoring global intelligence activities when an alert sounds.                                               ROB                             Major infiltration in progress. Russian intelligence targeting                             nuclear research facilities at Los Alamos.                                               ARJAY                             Part of the coordinated theft operation?                                               ROB                             Signatures match. This is big. They're going after classified                             weapons research.                                               PAULA                             How did they get access to a classified facility?                                               ROB                             They've compromised a contractor's credentials.                             Using that as an entry point.                                               PACO                             National security implications are extreme.                             If they get those weapons specs...                                               ARJAY                             Implement countermeasures. Maximum priority.                                               ROB                             Already on it. But this is different from previous infiltrations.                             They're using a new technique we haven't seen before. The team watches as the Russian operation unfolds with unprecedented sophistication.                                               PAULA                             This isn't just the usual Russian intelligence. They're using                             capabilities we've only seen from top-tier cyber actors.                                               PACO                             They've evolved their methods. Learning from previous failures.                                               ARJAY                             Or they're getting help. Is Sentinel Analytics active? ROB checks his monitoring systems.                                               ROB                             Yes. They're watching the infiltration too. But they're not intervening.                                               ARJAY                             Interesting. Why watch but not act?                                               PAULA                             Maybe they're gathering intelligence on Russian methods.                                               PACO                             Or maybe they're waiting to see what happens.                                               ARJAY                             Either way, we need to stop this infiltration now.                             National security is at stake.                                               ROB                             Working on it. But their new methods are making our usual                             countermeasures less effective.                                               ARJAY                             Then we need to be more direct. Can we block their access entirely?                                               ROB                             Not without revealing our presence in the system. ARJAY considers this dilemma, then makes a decision.                                               ARJAY                             Do it. Block their access. Priority is protecting the weapons research.                                               ROB                             But our protocols...                                               ARJAY                             Sometimes we have to choose between staying hidden and doing what's                             right. Block them. ROB nods and executes the command. The Russian infiltration is abruptly terminated.                                               PAULA                             They're locked out. The weapons data is secure.                                               PACO                             But they'll know someone actively intervened.                                               ARJAY                             It was a calculated risk. And now we watch how they respond. 26 INT. RUSSIAN INTELLIGENCE FACILITY - MOSCOW - DAY                                             26 Russian intelligence officers react with confusion and anger as their operation is suddenly blocked.                                               RUSSIAN OFFICER                             (in Russian with subtitles)                             What happened? We were in!                                               TECHNICAL ANALYST                             (in Russian with subtitles)                             Someone kicked us out. Not normal security protocols.                             This was an active countermeasure.                                               RUSSIAN OFFICER                             (in Russian with subtitles)                             American intelligence?                                               TECHNICAL ANALYST                             (in Russian with subtitles)                             No. The signature doesn't match NSA or Cyber Command.                             This is something else.                                               RUSSIAN OFFICER                             (in Russian with subtitles)                             Find out who did this. We need to know what we're facing. 27 INT. SENTINEL ANALYTICS HEADQUARTERS - SAME TIME                                             27 Chen and her team observe both the Russian operation and its sudden termination.                                               CHEN                             Someone just shut down the Russian infiltration. Direct intervention.                                               FISHER                             Not Los Alamos security. This was an external actor.                                               CHEN                             Our anonymous intelligence provider?                                               FISHER                             The methodology matches what we've observed in their other                             operations. But this is the first time they've directly intervened                             rather than just corrupting data.                                               CHEN                             They're escalating their activities. Becoming more aggressive.                                               FISHER                             Should we report this to INSCOM?                                               CHEN                             Not yet. This gives us an opportunity. They've revealed more                             of their capabilities than ever before. Begin full-spectrum                             analysis of their intervention methods. This might be the break we've been looking for. 28 INT. ROBIN HOOD VIRUS NETWORK OPERATIONS CENTER – NIGHT                             28 The team monitors the fallout from their intervention.                                               ARJAY                             Both the Russians and Sentinel Analytics are analyzing our                             intervention. They're looking for patterns, signatures,                             anything that might reveal our methods.                                               PACO                             Was it worth the risk?                                               ARJAY                             We stopped the theft of classified weapons research.                             I'd say that's worth it.                                               PAULA                             But now we're more exposed than ever.                                               ARJAY                             Which means we need to be even more careful going forward.                                               ROB                             Should we change our protocols again?                                               ARJAY                             Yes. And accelerate our investigation into the coordinated                             technology theft. We need to understand who's behind it and                             shut it down before more critical technologies are compromised.                                               ARJAY (V.O.)                             The Defense Investigative Service is responsible for safeguarding                             classified information received, produced, stored, and                             disseminated by U.S. Government contractors. DIS shares information                             with industry about specific targeting techniques used by                             foreign intelligence organizations.                                               ARJAY                             And we need to warn INSCOM about what we've discovered. The scale                             of this operation goes beyond anything we've seen before. The                             targeting is too precise, the methods too sophisticated.                                               PACO                             You think there's a master plan behind all these different                             countries' operations?                                               ARJAY                             I'm beginning to. And if I'm right, the threat is far                             greater than individual countries stealing individual technologies.                                               PAULA                             What kind of threat?                                               ARJAY                             The kind that could fundamentally alter the global balance                             of power. If someone is orchestrating a comprehensive theft of                             all critical U.S. technologies, they could leapfrog decades of                             research and development.                                               PACO                             Changing the world order overnight.                                               ARJAY                             Exactly. And we may be the only ones who see the full picture. The team looks at the global threat map, now showing hundreds of infiltration attempts across every critical technology sector.                                               ARJAY (V.O.)                             Diversion total to date: $207,500,000.                             Donation total to date: $195,000,000.                                               ARJAY                             Our original mission was to redirect wealth from the corrupt to                             those in need. But now we're facing something even bigger.                             A threat to global stability itself.                                               PACO                             So what's our next move?                                               ARJAY                             We find the mastermind behind the coordinated technology theft.                             And we stop them. As the team begins this new mission, we PULL BACK from the headquarters, seeing the global map of threats glowing in the darkness, and... FADE TO BLACK. This site is designed and maintained by: Robert Nerbovig