After several weeks of investigation, US authorities learn that al-Qaeda leader Abd al-Rahim al-Nashiri was involved in the plot to attack the USS Cole. Investigators find a second safe house used by the bombing team, and learn it was registered to al-Nashiri under a name variant. Al-Nashiri’s name is dimly familiar to FBI agent Ali Soufan, who remembers that a source said al-Nashiri was planning a seaborne attack against a US vessel in Aden (see After August 7, 1998). The FBI then finds that al-Nashiri rented a car in Aden before the bombing. Author Lawrence Wright will comment, “It was another strong link between al-Qaeda and the Cole attack.” [New Yorker, 7/10/2006 
] In addition, one of the bombers detained by Yemeni authorities, Jamal al-Badawi, identifies al-Nashiri as a person who gave instructions for the attack. Al-Badawi also says he thought al-Nashiri was working for bin Laden, but al-Nashiri did not tell al-Badawi this directly. [CNN, 12/13/2000] Although al-Nashiri was the operational manager, he was actually in Afghanistan for a meeting with Osama bin Laden when the opportunity to attack arose and was not physically present at the bombing. Investigators are aware that he is the cousin of one of the bombers of the US embassy in Nairobi, which he facilitated, and a captured embassy bomber identified a photo of him for the FBI two years earlier (see 10:35-10:39 a.m., August 7, 1998 and August 22-25 1998). Al-Nashiri has been known to various intelligence agencies since 1998, at least, and was monitored at the Malaysia summit of top al-Qaeda leaders at the start of the year (see January 5-8, 2000). [CNN, 12/11/2000; 9/11 Commission, 7/24/2004, pp. 152-3; Wright, 2006, pp. 318] US investigators also identify another leading suspect in the case, Khallad bin Attash, at around the same time (see January 4, 2001).
Early November 2000: Tipoff Leads to Break inColeInvestigation, Safe House Found
A local boy in Aden, Yemen, goes to the police and tells them he met the people who bombed the USS Cole before the attack, and the ensuing investigation reveals the vehicle and a safe house used by the bombers. The boy says that he was fishing when the bombers placed the boat in the water and that he was paid to watch the truck and the boat trailer, but the men never returned. The Yemeni police initially arrest him and his father, but the FBI obtains permission to talk to him and he takes them to the launch site. He says the bombers invited him and his family to ride in the boat before the attack, indicating the bombers were trying to find out how much weight the boat would carry. The truck and trailer are still at the launch site and the registration records lead investigators to a safe house that was used by the bombers. The FBI team finds that the bathroom sink in the house is full of body hair, as the bombers apparently shaved entirely before death. The FBI collects a razor and hair samples for future DNA identification. [New Yorker, 7/10/2006 ]
November 5, 2000-June 20, 2001: Atta, Alhazmi, and Moussaoui Purchase Equipment from Same Pilot Store
Zacarias Moussaoui and two of the 9/11 hijackers purchase flight training equipment from Sporty’s Pilot Shop in Batavia, Ohio. 
November 5, 2000: Mohamed Atta purchases flight deck videos for a Boeing 747-200 and a Boeing 757-200, as well as other items; December 11, 2000: Atta purchases flight deck videos for a Boeing 767-300ER and an Airbus A320-200; March 19, 2001: Nawaf Alhazmi purchases flight deck videos for a Boeing 747-400, a Boeing 747-200, and a Boeing 777-200, as well as another video. Alhazmi also purchases maps around this time from another shop (see March 23, 2001); June 20, 2001: Zacarias Moussaoui purchases flight deck videos for a Boeing 747-400 and a Boeing 747-200. [Sporty’s, 6/20/2001; US District Court for the Eastern District of Virginia, Alexandria Division, 12/11/2001 ] However, it is not clear whether Moussaoui was to take part in 9/11 or some other operation (see January 30, 2003).
November 7, 2000: Plans to Target Bin Laden Delayed Pending 2000 Election
In the wake of the USS Cole bombing, National Security Adviser Sandy Berger meets with Defense Secretary William Cohen to discuss a new approach to targeting Osama bin Laden. Berger says: “We’ve been hit many times, and we’ll be hit again. Yet we have no option beyond cruise missiles.” He once again brings up the idea of a “boots on the ground” option—a Delta Force special operation to get bin Laden. A plan is drawn up but the order to execute it is never given. Cohen and Joint Chiefs of Staff Chairman Henry Shelton oppose the plan. By December 21, the CIA reports that it strongly suspects that al-Qaeda was behind the bombing, but fails to definitively make that conclusion. That makes such an attack politically difficult. Says a former senior Clinton aide, “If we had done anything, say, two weeks before the election, we’d be accused of helping [presidential candidate] Al Gore.” [Time, 8/12/2002; 9/11 Commission, 3/24/2004]
Before November 12, 2000: 9/11 Hijacker Alhaznawi Receives Passport Possibly Containing Suspicious Indicator of Islamist Extremism, May Be Tracked by Saudi Authorities
9/11 Hijacker Ahmed Alhaznawi receives a new passport in Saudi Arabia. It is unknown exactly when Alhaznawi receives this passport, but he uses it to apply for a US visa on November 12, 2000 (see November 12, 2000), so it must be before that. According to the 9/11 Commission, the passport may contain an “indicator of extremism” that is “associated with al-Qaeda.” However, although it is certain some of the other hijackers have such indicator in their passports, it is not certain that Alhaznawi does. The commission will merely say that there “is reason to believe” his passport may contain such indicator and note that it was “issued in the same Saudi passport office” that issued passports with the indicator to some of the other hijackers. [9/11 Commission, 7/24/2004, pp. 564; 9/11 Commission, 8/21/2004, pp. 9, 15, 33 ] According to author James Bamford, the indicator is a “secret coded indicator, placed there by the Saudi government, warning of a possible terrorist affiliation.” [Bamford, 2008, pp. 58-59] The Saudi government reportedly uses this indicator to track some of the Saudi hijackers before 9/11 “with precision” (see November 2, 2007).
November 11, 2000:ColeInvestigators Find Link to Embassy Bombings
Based on information from interviews of suspects detained during the USS Cole bombings (see Late October-Late November 2000), the FBI finds that one of the lead bombers was Khallad bin Attash, an operative also involved in the 1998 East African embassy bombings (see 10:35-10:39 a.m., August 7, 1998). The detained men, Jamal al-Badawi and Fahad al-Quso, say that they recently traveled to Afghanistan and met bin Attash there. Al-Badawi also says bin Attash helped purchase a boat used in the Cole bombing. The head of the FBI’s investigation, Ali Soufan, is startled by this news, as an informer has already provided information on bin Attash, describing him as one of bin Laden’s top lieutenants. Although the FBI wants to interview the two detained men to obtain more information, the Yemeni authorities refuse at this point, saying they have both sworn on the Koran they were not involved in the attack, so they must be innocent. Limited access to al-Quso will be granted to the FBI later, but the Yemeni authorities will indicate to him that he is still under their protection (see Early December 2000). [Federal Bureau of Investigation, 9/9/1998 ; 9/11 Commission, 7/24/2004, pp. 192; New Yorker, 7/10/2006 ]
November 12, 2000: 9/11 Hijacker Alhaznawi Obtains US Visa, despite Incomplete Application and Possibly Fraudulent Travel Stamps
Future 9/11 hijacker Ahmed Alhaznawi obtains a US visa from the American consulate in Jeddah, Saudi Arabia. [9/11 Commission, 8/21/2004, pp. 15 ] The visa is issued by Shayna Steinger, a consular official who apparently issues the 9/11 hijackers with 12 visas (see July 1, 2000). [9/11 Commission, 12/30/2002, pp. 2; Office of the Inspector General (US Department of State), 1/30/2003] Alhaznawi may present a passport with fraudulent travel stamps and does not fully complete his application form, leaving blank the address of his school. He is not interviewed. [9/11 Commission, 8/21/2004, pp. 15, 36, 180-1 ] The 9/11 Commission will also suggest that Alhaznawi’s passport may contain a suspicious indicator of Islamist extremism, but this is not certain (see Before November 12, 2000 and November 2, 2007). Some of the radicals who bombed the World Trade Center in 1993 also had Saudi passports with the same indicator (see Around February 1993). [9/11 Commission, 7/24/2004, pp. 563-4; 9/11 Commission, 8/21/2004, pp. 14-15 ]
After November 12, 2000: 9/11 Hijacker Alhaznawi Leaves Saudi Arabia, Possibly Tracked by Saudi Authorities
9/11 Hijacker Ahmed Alhaznawi departs Saudi Arabia. The exact date of his departure is unknown, but it must be after he obtains a US visa at the US consulate in Jeddah on November 12 (see November 12, 2000). Although Alhaznawi’s precise destination is unknown, he reportedly returns to Afghanistan for training by early 2001 (see (December 2000-March 2001)) and will also arrive in the United Arab Emirates from Pakistan in early 2001 (see April 11-June 28, 2001). [9/11 Commission, 8/21/2004, pp. 15, 36 ] According to the 9/11 Commission, Alhaznawi may have had a passport containing an indicator of Islamic extremism (see Before November 12, 2000). Such indicators were used by the Saudi authorities to track some of the hijackers before 9/11 (see November 2, 2007).
Mid-November, 2000: Three 9/11 Hijackers Possibly Linked to Hezbollah Figure while Traveling to Iran
Based on intelligence reports, the 9/11 Commission will later say that 9/11 hijackers Wail Alshehri, Waleed Alshehri, and Ahmed Alnami travel in a group from Saudi Arabia to Beirut and then onward to Iran in mid-November 2000. An associate of a senior Hezbollah operative is also on the flight from Beirut to Iran. According to US intelligence, Hezbollah officials in Beirut and Iran are expecting the arrival of a group at around this time and this group is important enough to merit the attention of senior figures in Hezbollah. The commission will say that this flight may be part of Iranian assistance to al-Qaeda consisting of allowing operatives to transit Iran without stamping their passports on the way to and from Afghanistan (see After October 12, 2000). [9/11 Commission, 7/24/2004, pp. 240, 529]
Contradicted by Families’ Claims – However, two to three years before the 9/11 Commission publishes these claims, the families of both Ahmed Alnami and the Alshehri brothers will deny they travel anywhere at this time, and say they leave home in December, not the middle of November. After 9/11, Alnami’s father will initially say Alnami has been missing since December 2000 and will later repeat that he left home in December 2000 in an interview with the Daily Telegraph. [Washington Post, 9/25/2001; Daily Telegraph, 9/15/2002] The Alshehri brothers’ family will also claim they do not leave until after mid-November 2000. Initially, the father will say that they left “last Ramadan.” [Arab News, 9/17/2001] The month of Ramadan begins on November 27 in 2000. [Israeli Ministry of Foreign Affairs, 11/26/2000] Based on a 2002 interview with one of their brothers, the Boston Globe will also later say that they leave in December. [Boston Globe, 3/3/2002] If this is true, the story of their travel with a Hezbollah operative would probably be incorrect.
9/11 Commission’s Sourcing – The 9/11 Commission cites intelligence reports, mostly drafted between October and December 2001, as its sources. [9/11 Commission, 7/24/2004, pp. 240, 529] These reports come from the NSA. [Shenon, 2008, pp. 370-373]
Alnami Possibly Tracked by Saudi Intelligence – According to the 9/11 Commission, Alnami may have had a passport with an indicator of Islamic extremism (see November 6, 1999). Such indicators were used by the Saudi authorities to track some of the hijackers before 9/11 (see November 2, 2007).
November 17, 2000: US Issues International Arrest Warrant for KSM
The US puts out an international arrest warrant for Khalid Shaikh Mohammed (KSM). The warrant seeks KSM in connection with the 1995 Bojinka plot (see January 6, 1995). [Knight Ridder, 3/13/2003] It is not clear why the US waited so long to issue this warrant, considering that the US connected him to a major terrorist act back in 1993 (see March 20, 1993), learned he was a major figure in the Bojinka plot in 1995 (see After February 7, 1995-January 1996), secretly indicted him in January 1996, and placed a $2 million reward on his head in January 1998 (see January 8, 1998).
