The extracts in this repository are drawn primarily five docket entries in WhatsApp Inc. and Meta Platforms, Inc. v. NSO Group Technologies Limited and Q Cyber Technologies Limited, Case No. 4:19-cv-07123-PJH (US District Court, Northern District of California). CourtListener docket: https://www.courtlistener.com/docket/16395340/whatsapp-inc-v-nso-group-technologies-limited/
The raw PDFs are large and already public, so they are not committed here
(see the repository .gitignore). Each is available at the CourtListener link
below. The gov.uscourts.cand.350613.<docket>.<attachment>.pdf naming matches
CourtListener's own filenames; place the downloaded PDFs in this folder to keep
a local mirror.
CourtListener storage base:
https://storage.courtlistener.com/recap/gov.uscourts.cand.350613/
The primary source. Twenty attachments; some bundle more than one exhibit.
Testimony and expert reports are listed for completeness; the internal NSO
documents are the ones extracted into ../documents/.
| Attachment | Pages | Contents | Extracted as |
|---|---|---|---|
| 796-0 | 5 | The notice itself | - |
| 796-1 | 27 | Declaration of Terrence McGraw (NSO networking/VoIP expert) | - |
| 796-2 | 103 | Deposition of Yaron Shohat (NSO Group CEO) | - |
| 796-3 | 201 | Expert Report of David Youssef (Plaintiffs' expert, FTI Consulting), 30 August 2024 | Erised installations log (pp. 141-161) |
| 796-4 | 48 | Deposition of Tamir Gazneli (NSO VP of R&D), excerpt | - |
| 796-5 | 161 | Bundle: Deposition of Tamir Gazneli (Exhibit 5, pp. 2-42) and NSO's supplemental interrogatory responses (pp. 43-70); Deposition of Ramon Eshkar (Exhibit 7, pp. 72-85); Deposition of Yaron Shohat (Exhibit 9, pp. 87-108); NSO Q2 2018 board meeting deck (Exhibit 26, pp. 110-113); Deposition of Joshua Shaner, WestBridge Technologies (Exhibit 27, pp. 115-143); Deposition of Terrence Patrick DiVittorio (Exhibit 30, pp. 145-161) | eshkar-deposition.pdf (pp. 72-85), NSO Q2 2018 board meeting (deposition exhibit, pp. 110-113), shaner-deposition.pdf (pp. 115-143) |
| 796-6 | 18 | Expert Report of Anthony Vance (Plaintiffs' expert), 30 August 2024 (Exhibit B) | vance-expert-report.pdf (pp. 2-18) |
| 796-7 | 35 | Declaration of David J. Youssef | - |
| 796-8 | 57 | Declaration and Expert Report of Terrence McGraw | - |
| 796-9 | 5 | Declaration of Tamir Gazneli | - |
| 796-10 | 59 | Deposition of Yaron Shohat, excerpt | - |
| 796-11 | 206 | NSO's responses to interrogatories | - |
| 796-12 | 31 | Erised "Deviate installations on white environment" dashboard (Exhibit 21) | erised-installation-dashboard.pdf |
| 796-13 | 45 | "Devices for Sales environment"; Pegasus 3 Introduction deck (Exhibits 22-25) | devices-for-sales-environment.pdf (p. 2) / heaven-emulators-deployment.pdf (pp. 4-5) / pegasus-3-introduction.pdf (pp. 7-30) / pegasus-system-roles.pdf (pp. 32-45) |
| 796-14 | 87 | Active data collection slides + covert-vectors guidelines + training (Exhibits 26-28) | active-data-collection-slides.pdf / covert-vectors-guidelines.pdf / active-data-collection-training.pdf |
| 796-15 | 67 | Pegasus product description 2018; Mobile Endpoint product description; hardware BOM (Exhibits 32-35) | pegasus-product-description-2018.pdf (pp. 2-36) / mobile-endpoint-product-description.pdf (pp. 38-59)/ system-bill-of-materials.pdf (pp. 61-67) |
| 796-16 | 35 | "Covert Android Installation Specifications": the Heaven/Eden engineering bundle | heaven-full-prd.pdf (pp. 4-9) / wis-refactoring-heaven-separation.pdf (pp. 11-14) / heaven-system-architecture-spec.pdf (pp. 16-19) / heaven-2.7.1-technical.pdf (pp. 21-24) / heaven-accounts-availability.pdf (pp. 30-31) / how-to-create-abs-server.pdf (pp. 33-35) |
| 796-17 | 44 | Bundle of exhibits (46-50): Eden covert-vector Confluence pages (Exhibits 46-49); "Erised (Covert Android) System Architecture" (Exhibit 50) | eden-covert-vector-pages.pdf (pp. 2-11) / erised-system-architecture-spec.pdf (pp. 13-44) |
| 796-18 | 27 | Bundle of Confluence support specification and OpSec pages: WhatsApp agent support specification, Opsec Rule Engine PRD and OpSec alerts | pegasus-3-pony-whatsapp-agent.pdf (pp. 2-5) / opsec-rule-engine-prd.pdf (pp. 14-20) / opsec-alerts.pdf |
| 796-19 | 41 | Bundle of Confluence release-notes and OpSec pages (Exhibits 63-75): Pegasus 2.50 / 2.52 / 2.65 / 2.66 / 2.67.1 / 2.70 release material (several as alternate Confluence revisions), a 2.65 technical summary, the Android device-support tracker, and the OpSec Home and "Field learning" cases pages | pegasus-2.50-android-release-notes / pegasus-2.52-android-release-notes / pegasus-2.65-release-notes / pegasus-2.65-release-highlights / pegasus-2.65-technical-summary / pegasus-2.66-android-release-notes / pegasus-2.66-heaven-beta-release-note / pegasus-2.67.1-android-release-notes / pegasus-2.67.1-android-release-highlights / pegasus-2.70-component-versions / pegasus-2.70-abuse-prevention-updates / android-device-exploit-support / opsec-home / opsec-field-learning-cases |
| 796-20 | 48 | "Pegasus 2.70 (Android & P2 Platform)" release-planning / Heaven feature roadmap (Exhibits 76-90) | pegasus-2.70-android-release-planning.pdf (pp. 2-48) |
679-6 (139 pages): NSO documents produced in discovery and filed by WhatsApp/Meta. The notice itself is Dkt. 679.
| Pages | Contents | Extracted as |
|---|---|---|
| 94-102 | "Happy Flow" sales/demo walk-through | pitch-happy-flow.pdf |
| 104-117 | Per-account Pegasus revenue table (2018-2020) | customer-revenue-list.pdf |
| 119-129 | NSO C2 infrastructure and per-country WhatsApp-VoIP targeting | whatsapp-targets-per-country.pdf |
674 (36 pages), filed by NSO in support of its opposition to Plaintiffs' sanctions motion (Exhibits 9, 10, 13-18).
| Pages | Contents | Extracted as |
|---|---|---|
| 17-23 | NSO capabilities deck ("Data to Intelligence") (Exhibit 13) | nso-intelligence-capabilities-deck.pdf |
| 25-28 | Mobile end-point solutions (Exhibit 14) | mobile-endpoint-solutions.pdf |
| 32 | Endpoint agent (Exhibit 16) | endpoint-agent.pdf |
320 (223 pages). Its Exhibit 11 reproduces the original October 2019 complaint and its attachments; Document 1-1 is the NSO–Ghana reseller agreement.
| Pages | Contents | Extracted as |
|---|---|---|
| 111-156 | NSO–Ghana reseller agreement (17 Dec 2015), filed as complaint Document 1-1 | nso-ghana-agreement.pdf |
825 (128 pages), the appellant's excerpts of record for No. 25-7380, reproducing previously-sealed exhibits (originally filed as Dkt. 813-4).
| Pages | Contents | Extracted as |
|---|---|---|
| 58-78 | 2018 Q Cyber Technologies SARL customer licence agreement | qcyber-customer-agreement-2018.pdf |