CIA confirms suspect worked with CIA‑backed unit; report identifies NDS‑03 base at Camp Gecko
The CIA confirmed the D.C. shooting suspect, 29‑year‑old Afghan national Rahmanullah Lakanwal, had worked with a CIA‑supported Afghan partner force in Kandahar and was evacuated to the U.S. in 2021 under Operation Allies Welcome; he has been charged in the ambush near the White House that left two West Virginia National Guard members critically wounded. Reporting and AfghanEvac identify the unit as NDS‑03 (the so‑called "Zero Unit") and say it operated from Camp Gecko in Kandahar, a base tied to CIA‑backed operations.
Operation Allies Welcome
Refugee Resettlement & Vetting
Intelligence and Afghan Allies
Homeland Security and Immigration
National Guard Deployment
Immigration Policy
National Guard and Public Safety
National Guard
Washington, D.C. shooting
Immigration and Vetting
Courts and Law Enforcement
D.C. National Guard shooting
Law Enforcement
Domestic Security
U.S. Immigration/Vetting
Immigration and Asylum
White House Communications
CIA
Washington, D.C. Shooting
Washington D.C. Guard Shooting
National Guard Shooting
National Guard and Military
District of Columbia Shooting
Washington D.C. Shooting
Donald Trump
Washington, D.C. Public Safety
Washington, D.C. Security
National security and law enforcement
Washington, D.C.
D.C. National Guard Shooting
D.C. Guard Shooting
Crime and Public Safety
District of Columbia Crime
Afghan Allies Resettlement
White House Security Incident
Law Enforcement and Security
Crime and Law Enforcement
Afghan Evacuees and Vetting
U.S. National Security
U.S. Immigration and Refugees
Afghan Evacuees
National Security
National Guard and Domestic Security
Immigration and National Security
Afghan Resettlement
Media and Politics
📌 Key Facts
- On Nov. 26, 2025, around 2:15 p.m. ET, a lone assailant ambushed two National Guard members on a high‑visibility patrol near the Farragut Square / Farragut West metro area; nearby Guardsmen exchanged fire, ran over and restrained the suspect, and the scene was later declared secure.
- The wounded service members were identified as Specialist Sarah Beckstrom, 20, and Staff Sgt. Andrew Wolfe, 24; Beckstrom later died and Wolfe remained hospitalized in critical condition.
- Authorities identified the suspect as 29‑year‑old Afghan national Rahmanullah Lakanwal, who was evacuated to the U.S. under Operation Allies Welcome in 2021, lived in Bellingham, Washington with his wife and five children, applied for asylum in 2024, and was granted asylum in April 2025 while a green‑card/SIV process remained pending.
- Investigators say the attacker carried a .357 Smith & Wesson revolver (described generally as a revolver), initially shot a female Guard member, then took her weapon and kept firing; at least one Guard returned fire and the suspect was shot and hospitalized with injuries not believed to be life‑threatening, though it remains unclear whose round struck him.
- The CIA publicly confirmed Lakanwal had worked with U.S. government partner forces in Kandahar during the Afghanistan war; reporting and AfghanEvac/Fox identified the unit as NDS‑03 (the so‑called "Zero Unit") and said it operated from Camp Gecko.
- The FBI is leading a nationwide investigation that federal officials are treating as a possible act of international terrorism, executing search warrants and reviewing the suspect’s Afghan partner‑force ties and U.S. associates.
- U.S. prosecutors announced criminal charges including multiple counts of assault with intent to kill while armed and a firearm‑during‑a‑crime‑of‑violence count, with the possibility of upgraded charges depending on outcomes.
- The shooting prompted prompt policy and official responses: President Trump called it an "act of terror," ordered 500 additional National Guard troops to D.C. and said Afghan admissions would be reexamined; USCIS paused processing Afghan‑related immigration requests pending a vetting review, and DHS officials and local caseworkers have provided competing accounts about the suspect’s post‑arrival isolation and possible radicalization.
📊 Relevant Data
More than 5,000 Afghans brought to the US after American forces withdrew from the country in 2021 got flagged for national security issues.
Over 5K Afghan migrants flagged on 'national security' grounds since 2021, document reveals — New York Post
Afghan immigrants in the United States in 2022 had a poverty rate of 24.9 percent, compared to 12.4 percent for US natives and 17.3 percent for all immigrants.
Afghan Immigrants in the United States — Migration Policy Institute
Afghan immigrants in the United States ages 16 and over had an unemployment rate of 11.2 percent in 2022, compared to 5.1 percent for all immigrants.
Afghan Immigrants in the United States — Migration Policy Institute
Afghan evacuees presented with high rates of mental health issues, including suicidal ideation, potentially linked to pre-resettlement trauma, which may contribute to post-arrival challenges.
Welcoming new neighbors: Minnesota's rapid response model to support Afghan evacuees — PMC
📊 Analysis & Commentary (3)
Horror on Thanksgiving Eve
"The Playbook column comments on the D.C. Guard shooting (the suspect’s CIA‑linked Afghan background), warns that both parties are rushing to politicize the attack, and urges caution and evidence‑based responses rather than instant partisan exploitation."
The Ambush on the National Guard
"A Wall Street Journal editorial condemns the ambush of two National Guard members and uses the suspect’s status as an Afghan evacuee to criticize U.S. resettlement and vetting policies, urging a reassessment of security procedures."
The emerging MAGA fractures
"The Politico piece links the D.C. shooting and the suspect’s CIA‑partner background to an immediate hardline immigration push and uses POLITICO poll data to argue that such security‑driven policies risk exposing and deepening emerging fractures between MAGA loyalists and the broader 2024 Trump electorate."
📰 Sources (48)
National Guard shooting suspect spent weeks in isolation, 2024 emails say
New information:
- A former Afghan commando told CBS Lakanwal led an Afghan special forces unit in the south and worked closely with international troops.
- The commando said Lakanwal was deeply troubled by a close friend and fellow commander’s death in 2024 after an unsuccessful U.S. asylum bid.
- Adds personal context: prolonged isolation, reported 'manic episodes,' and family hardship in 2023–2024 as documented by caseworker emails.
Afghan suspect in National Guard attack was 'radicalized' after arriving to US, Noem says
New information:
- Noem states DHS believes Lakanwal’s radicalization occurred after he arrived in the U.S., adding a timeline detail to prior reporting on his background.
- She indicates investigators are engaging with people from his U.S. community who are providing information.
Advocate warned Afghan evacuee was 'not functional as a person' months before National Guard shooting
New information:
- AP-reviewed emails show an advocate warned months earlier that Lakanwal had 'not been functional' since March of the prior year, citing quitting work, isolating in a dark room, and unresponsiveness to family.
- The advocate reported alternating 'periods of dark isolation and reckless travel,' including abrupt trips to Chicago, Arizona, and Washington, D.C., sometimes described as 'manic' episodes lasting 1–2 weeks.
- USCRI staff traveled to Bellingham in March 2024 after warnings but made no meaningful contact; the advocate believed Lakanwal declined help.
- Additional context that he abandoned English classes, cycled through short-term jobs, and his children at times arrived at school unbathed or in the same clothes for days.
- FBI continues to examine motive and has not confirmed any ideological influence; DHS Secretary Kristi Noem has suggested possible post-arrival radicalization.
National Guard suspect "radicalized since he's been here in this country," Noem claims
New information:
- DHS Secretary Kristi Noem said the suspect was 'radicalized since he's been here in this country' and suggested ties in his U.S. community/state, offering no further details.
- Noem alleged Biden-era vetting was limited and contrasted it with current biometric and social-media checks she says are now in place.
- Samantha Vinograd stated there is no indication the shooting was a vetting failure and explained the scope and limits of the vetting system.
Suspect in National Guard attack struggled with 'dark isolation' as community raised concerns
New information:
- Reiterates Lakanwal served in a CIA-backed Afghan 'Zero Unit' before entering the U.S. under Operation Allies Welcome in 2021.
- Provides new context on his post-arrival deterioration, including inability to hold a job and isolation patterns that prompted outreach to a refugee services nonprofit.
Trump says one of the two West Virginia National Guard members shot by Afghan national has died
New information:
- AP cites sources and AfghanEvac that suspect Rahmanullah Lakanwal worked in a CIA‑backed Afghan Army unit, aligning with prior confirmations.
- Trump’s remarks escalate the incident’s framing as a 'terrorist attack' and criticize Afghan resettlement policy.
- Prosecutor Jeanine Pirro detailed the weapon and present charges, saying motive remains unknown.
One of the National Guard troops shot in D.C. attack has died, Trump says
New information:
- Confirms the deceased victim’s identity: Army Spc. Sarah Beckstrom.
- Confirms the second victim’s status: Andrew Wolfe remains in critical condition.
- Places the casualty update on Thursday night following the Wednesday ambush.
Trump says one of the National Guard members shot in D.C. has died
New information:
- A victim in the Farragut Square-area ambush has died: West Virginia National Guard member Sarah Beckstrom, 20.
- Trump disclosed the death during a Thursday evening call with service members.
Investigations of National Guard shooting reveals suspect worked for CIA in Afghanistan
New information:
- Investigators say the suspect drove across the country to carry out the attack.
- Prosecutors plan to charge the Afghan national with three counts of assault with intent to kill.
- The two National Guard members remain in critical condition.
Trump administration orders green card "reexamination" from "countries of concern"
New information:
- Victims identified as Army Spc. Sarah Beckstrom, 20, and Air Force Staff Sgt. Andrew Wolfe, 24; both remain in critical condition.
- U.S. Attorney Jeanine Pirro announced charges: three counts of assault with intent to kill while armed, plus a firearm during a crime of violence.
- Officials reiterate the suspect, Rahmanullah Lakanwal, arrived in 2021 under Operation Allies Welcome and was granted asylum earlier this year; a Guard member shot him to end the attack.
Trump criticizes the program that brought Afghan refugees to the U.S. who fought the Taliban
New information:
- CIA Director John Ratcliffe issued a statement blaming Biden-era Operation Allies Welcome vetting, saying the suspect "and so many others" should not have been allowed to come to the U.S.
- Article reiterates that Rahmanullah Lakanwal worked with a CIA partner force in Kandahar and adds that he was granted asylum in April under the Trump administration, according to #AfghanEvac.
- New personal detail: a former landlord says Lakanwal lived in Bellingham, Washington, with his wife and five children.
- #AfghanEvac outlined asylum vetting steps (fingerprinting, iris scans, background check, interview, risk assessment) that would have applied to Lakanwal.
- Scale/context update: about 76,000 Afghans were brought to the U.S. under Operation Allies Welcome, with initial processing at U.S. military bases (JB McGuire‑Dix‑Lakehurst, Fort McCoy, Fort Bliss).
Details emerge on CIA unit alleged National Guard shooter served with in Afghanistan
New information:
- Fox identifies the specific CIA‑backed 'Zero Unit' as NDS‑03 and says it operated from Camp Gecko (Mullah Omar’s former compound) across Kandahar, Helmand and Uruzgan.
- Afghan Evac says Lakanwal entered the U.S. in 2021 under Operation Allies Welcome and was granted asylum in April 2025 under the Trump administration.
- A senior U.S. official says CIA vetting would have checked NCTC databases and kept identities confidential; notes Afghans sometimes forged birth dates to meet age requirements.
- U.S. Attorney Jeanine Pirro and FBI Director Kash Patel publicly criticized vetting at a Nov. 27 press conference.
- Timeline detail: Lakanwal reportedly began working with the CIA around 2011, likely as a minor.
Trump celebrating Thanksgiving at Mar-a-Lago
New information:
- Identifies the two wounded West Virginia National Guard members by name and age: Spc. Sarah Beckstrom, 20, and Pfc. Andrew Wolfe, 24; both remain in critical condition.
- States both Guardsmen had been stationed in D.C. since August and were deputized less than 24 hours before the attack to conduct presence patrols.
- Reports suspect Rahmanullah Lakanwal drove from Washington state to carry out the attack and was shot by another Guard member before being taken into custody.
- Includes Trump’s video statement labeling the shooting an 'act of terror' and pledging to 'reexamine every single alien' who entered from Afghanistan under Operation Allies Welcome.
- Notes Defense Secretary Pete Hegseth’s announcement of 500 additional National Guard troops to D.C. (contextual to the incident).
D.C. Shooting: What We Know About the National Guard Victims
New information:
- Officials identified the two wounded Guard members as USAF Staff Sgt. Andrew Wolfe, 24, of Martinsburg, W.Va., and U.S. Army Specialist Sarah Beckstrom, 20, of Summersville, W.Va.
- Wolfe is assigned to the Force Support Squadron, 167th Airlift Wing, West Virginia Air National Guard; Beckstrom is assigned to the 863rd Military Police Company, 111th Engineer Brigade, West Virginia Army National Guard.
- Service entry dates: Wolfe entered service Feb. 5, 2019; Beckstrom on June 6, 2023.
- Medical status update: both remain in critical condition; Beckstrom’s father says she has a 'mortal wound' and is unlikely to recover.
- Both had been deployed to Washington, D.C., since August as part of the Trump administration’s crime‑crackdown deployment.
National Guard shooting suspect served in CIA counterterrorism unit, group says
New information:
- AfghanEvac identifies the specific Afghan unit as NDS-03, described as operating at the CIA’s direction.
- CIA Director John Ratcliffe said the suspect was admitted to the U.S. due to his prior work with the U.S. government, including the CIA.
- Timeline details: evacuated to the U.S. in Aug. 2021 under humanitarian parole; asylum was granted in April 2025.
- Immigration status details: the suspect had SIV chief of mission approval but had not yet obtained lawful permanent residence.
- FBI Director Kash Patel said the suspect’s relationship with partner forces in Afghanistan will be a central focus of the probe and alleged vetting failures by the prior administration.
- AfghanEvac emphasized extensive vetting for this population and cautioned against broad-brush judgments; founder Shawn VanDiver’s on‑record quote included.
Trump reacts to National Guard shooting in D.C. as details emerge about Afghan suspect
New information:
- CBS reports President Trump publicly weighed in on the D.C. National Guard shooting.
- CBS says the suspect, Rahmanullah Lakanwal, previously worked with the U.S. government, including the CIA.
- CBS reiterates the suspect entered the U.S. in 2021.
2 National Guard members in critical condition after "ambush" attack linked to Afghan national
New information:
- Officials say the suspect, 29-year-old Rahmanullah Lakanwal, now faces several D.C. charges of assault with intent to kill while armed.
- Authorities characterized the incident as an 'ambush' attack.
- Two National Guard members remain in critical condition, per the latest update.
What we do and don’t know about the shooting of 2 National Guard members in DC
New information:
- Victims identified: Specialist Sarah Beckstrom, 20, and Staff Sgt. Andrew Wolfe, 24; both remain in critical condition.
- U.S. Attorney Jeanine Pirro said the suspect, Rahmanullah Lakanwal, drove across the country and carried out an 'ambush‑style' attack with a .357 Smith & Wesson revolver.
- Video shows the assailant 'came around the corner' and immediately opened fire; at least one Guard member exchanged gunfire.
- Troops subdued the gunman by running over and holding him; his injuries are not believed to be life‑threatening.
- Additional charge detailed: possession of a firearm during a crime of violence (along with assault with intent to kill while armed).
- West Virginia Gov. Patrick Morrisey initially stated the Guardsmen were killed, then retracted amid 'conflicting reports.'
- Lakanwal has been living in Washington state with his wife and five children, according to a former landlord.
- Approximate deployment size noted: nearly 2,200 Guard members were in D.C. for the mission.
Officials ID wounded National Guard members on job less than 24 hours before DC ambush as probe intensifies
New information:
- Victims identified as West Virginia National Guardsmen Sarah Beckstrom, 20, and Andrew Wolfe, 24; both remain in critical condition after surgery.
- Both Guardsmen were sworn in less than 24 hours before the ambush, according to U.S. Attorney Jeanine Pirro.
- Officials say the suspect used a .357 Smith & Wesson revolver; one Guardsman was shot, fell, and the attacker leaned over and shot again.
- Nearby Guardsmen rushed the suspect and a responding Guardsman shot and subdued him; the suspect is hospitalized under heavy guard.
- FBI Director Kash Patel said he spoke with CIA Director John Ratcliffe and War Secretary Pete Hegseth, and confirmed the suspect’s prior relationship with U.S. partner forces in Afghanistan; the case is being investigated as a possible act of international terrorism.
Mayor: D.C. shooting suspect drove cross-country to "attack America"
New information:
- Mayor Muriel Bowser said the suspect 'drove across the country' to 'attack America.'
- U.S. Attorney Jeanine Pirro identified the suspect as a 29-year-old Afghan national who lived in Bellingham, Washington, with his wife and five children and entered via a Biden-era Afghan program.
- Victims named as West Virginia National Guard members Sarah Beckstrom (20) and Andrew Wolfe (24); both underwent surgery.
- Shooting time and proximity: about 2:15 p.m. ET a short walk from the White House.
- Weapon detail: suspect carried a .357 Smith & Wesson revolver; he was shot by a Guard member and is hospitalized.
- FBI Director Kash Patel said multiple search warrants were executed nationwide; all occupants of the suspect’s last-known residence were interviewed; the probe spans 'coast-to-coast' and includes reviewing his Afghan partner-force connections and associates.
+ 28 more sources