certificates on websites. Where decryption is not possible, the system is also able to capture metadata and analyse online behaviour. A screenshot of the junta’s National Cyber Security Centre’s Network Zodiac license, extracted from the Geedge dataset. Decrypted plain text traffic can then be mirrored to a third party for archiving and analysis. TSG also features an application firewall to "deny or allow more than 1000 applications based on their behaviours and attributes”. According to a Geedge TSG Solution Review document, the TSG package consists of licenses for three key packages of software: TSG with Central Management "for the central management such as GUI, Policy, Events and Records, Network Visibility and Report"; Cyber Narrator "for supporting hunting the IP addresses of evasive proxy" and Network Zodiac "for system operation and maintenance”. This is coupled with hardware assembled in China that is also provided by Geedge. Hardware described in the company's proof of concept for the Myanmar junta consisted of an Optical Bypass Protector, Ether Fabric, TSG XM14220, TSG Central Management, TSG OLAP (Server 1), TSG OLAP (Server 2) and ISP Traffic Aggregation Switch. 13

Select target paragraph3