This document is a CSEC presentation from the NSA SIGDEV 2010 Conference on the Counter Computer Network Exoloitation (CCNE) team. It details how the CCNE works and how its use of operational relay boxes allow the CCNE to hide its actions through covert infrastructure.