Great find from 2018. Among other things, details bio outbreaks/leaks/attacks across Ukraine. Also how the U.S. maintains deniability:

The Defense Threat Reduction Agency (DTRA) has outsourced much of the work under the military program to private companies, which are not held accountable to Congress, and which can operate more freely and move around the rule of law. US civilian personnel performing work at The Lugar Center have also been given diplomatic immunity, although they are not diplomats. Hence, private companies can perform work, under diplomatic cover, for the US government without being under the direct control of the host state – in this case the Republic of Georgia.