UPDATE: It seems that Jacob Beeders over at Bellingcat scooped this one by a couple of hours: https://www.bellingcat.com/news/africa/2017/03/21/happened-kulbiyow-somalia-open-source-investigation/ 

Their analysis is supported here – that the Al-Kataib imagery can be matched to various parts of the NTV footage filmed after the attack (ironically in a KDF-run press tour intended to discredit Al-Shabaab claims to have overrun the base). In some places, our and Bellingcat’s specific points of analysis and verification match (for instance, stills of the makeshift church with the blue tarpaulin and of three distinctly parked vehicles). The following includes some additional material from The Nation and the NTV base tour, and further matches these sources against satellite imagery of the base, and Al-Kataib imagery.

The 27 January Al-Shabaab attack on a KDF base at Kulbiyow followed a familiar pattern for attacks on military bases in the region, in more ways than one. Not only did the initially reported details of the attack seem all too familiar (an early morning VBIED followed by a massed ground assault by militants), but conflicting media reports, claims and denials in the aftermath of the attack, also followed a recognizable pattern.

Early media reports largely repeated the basics of an Al-Shabaab press announcement (which came out on the same day as the attack). These reports were supposedly corroborated to some extent by local media through witness reports, and described the KDF base as being overrun, with heavy casualties inflicted on KDF forces. Incidentally, the Kulbiyow attack took place one year and a few days after a very similar attack on another KDF base, at el-Adde, further north in Somalia. There, Al-Shabaab fighters overran the base, inflciting heavy casualties. As at Kulbiyow, the immediate response from KDF press relations, and the Kenyan Defence Ministry, was to issue denials of reports that heavy casualties had been suffered and a base overrun. In the case of el-Adde, months later, the KDF was forced to later admit that the garrison had been almost entirely wiped out (140+ KIA).

In the days following the Kulbiyow attack, Al-Kataib, the media arm of al-Shabaab, released a set of images purportedly from the attack. The KDF and Kenyan Ministry of Defence doubled down on its counter-claims that reports of heavy KDF casualties were false, and that it was the militants who had in fact suffered a beating.

Kenyan media also interviewed Major Dennis Girenge, the base commander at the time of the attack, who outright denied reports that the base had been overrun. Girenge had been evacuated for gunshot wounds. In the same article, another soldier, who was also wounded and claimed to have played dead among his dead compatriots at a machine gun post, described seeing truckloads of dead Al-Shabaab militants being carried away.

The competing accounts of the battle can be divided into two broad narratives:

  • The Al-Shabaab claim, reported by some local media and supposedly corroborated by witnesses : That the base was overrun; Heavy KDF casualties; Vehicles were destroyed and equipment looted
  • KDF/Def Ministry account: Base was not overrun; Light KDF casualties; Al-Shabaab VBIEDs and troop concentrations detected and destroyed.

Digging into the specifics made available in the various accounts provide a wide range of overlapping details, several minor inconsistencies that could be chalked up to misinterpretation or minor confusion. But the central points of disagreement are significant.

The imagery released by Al-Kataib appears to show a base that has been, or is in the process of being overrun. While that imagery does show several KDF casualties, it does not show the 50+ casualties claimed by Al-Shabaab. Nevertheless, it does show militants within the perimeter of the base. If the base is not completely overrun, then the images of flags being raised over burning vehicles and bunkers, while militants wander about, carrying away arms and ammunition, must at least suggest a base’s perimeter was breached and defensive forces were suppressed, for at least some period of time. That would run contrary to the main thrust of the narrative put forward by the KDF – that the attack was comprehensively defeated.

This then raises a question of verification: is the Al-Kataib imagery in fact from Kulbiyow?

A starting point in this regard, was to locate the base itself. As it turns out, the key was to search for the town of Kolbio, on the Kenyan border.

The base location – on the Kenyan border

A 2014 satellite images showing the base (circled in red), alongside the border, with Kulbiyow/Kolbio town to the east, marked in green.

Progress on the development of the base at Kulbiyow from 2002 through to 2014

December 2016 imagery of the base. Note the extended second perimeter fence, and large deadzone of cleared brush, and the half-moon of tents outside of the main perimeter.



In the aftermath of the attack, the KDF invited media to visit the base. During tour, video footage of the base was shot from the helicopter carrying The Nation press team. A half-moon shaped collection of structures can be seen here, which was visible in the 2016 satellite imagery.


The tour itself starts with possible explosions in the background from an unknown source – disturbed carrion birds fly off and plumes of dust or smoke are visible as the soldiers look around hurriedly. “All is well, all is well” says the tour leader, Major George Osano – the new base commander.

During a tour of a crater outside the base perimeter, Major George Osano explains that indirect fire destroyed a VBIED – leaving behind the crater. Leaf springs, described by Osano as intentionally stored in the vehicle to serve as extra shrapnel, are neatly piled in a hole. This site is described as being 600m from camp – which Osano specifically claims is the closest that the militants got to the base.

“Where is the rest of this vehicle?” “That is the engine … you are lucky you got the engine”.

Remnants of a VBIED, purportedly destroyed by indirect mortar fire – an unlikely claim on its own, and also in contradiction of other accounts from interviews which said the first VBIED was engaged by either an RPG or an 84mm weapon (possibly an M3 Carl Gustav).



The NTV special ends with an additional snippet of aerial imagery made available by the KDF – a short, sped-up video feed from a drone that purportedly observed the base on the day of the attack. The NTV news team mistakenly calls it “satellite video surveillance of the camp”. In the video, per KDF claims, KDF personnel are visible in the base after having defeated Al-Shabaab militants. The video itself is inconclusive in this regard (there is no way to independently verify if the figures seen in the video are in fact KDF personnel). However, this video proves to be vital for tying together the available satellite imagery to on-the-ground images from both the NTV base tour, and the Al-Kataib imagery purportedly showing Al-Shabaab militants during the attack.


Stitched together stills from the KDF drone footage of the base on the day of the attack matches the December 2016 satellite imagery of the candidate site.

  • Further commonality with satellite imagery of the candidate site – the perimeter dotted with bunkers, and collection of bunkers within that perimeter again appear similar (if not conclusively so) with the satellite imagery. The major geographic points of commonality are the peculiar bodies of water within the base.
  • The drone video feed is uncensored – telemetry reveals the altitude, orientation, and latitude/longitudinal coordinates of the drone at the time of recording. While somewhat imprecise (for unknown reasons) – they appear to put it in the general vicinity of the primary candidate base.


Notables in the drone feed images are:

Scorch marks around bunkers several bunkers and vehicles


Some vehicles are visible – but oddly dispersed on and within the perimeter.

Possible VBIED detonation site on the perimeter of the base.

Matching and verifying sources: Satellite imagery, the NTV flyover, the KDF drone footage

2013 satellite image showing solid structures in red and purple, perimeter bunkers in orange, and the rough road outline in green.

A 2016 satellite image of the same, with an additional possible ammunition pit in blue

NTV footage of their flight into the base – with solid structures, bunkers, road and pit marked.

KDF drone footage of the base on the day of the attack – showing matching solid structures.

Together, the satellite imagery, NTV ground and aerial video, and KDF drone video appear to show the same site. Next up: Verifying and matching the Al-Kataib imagery.



During the NTV video, the news crew are treated to a (somewhat awkwardly choreographed) live-firing of a mortar to demonstrate how the weapon was employed during the attack. (As a side note, the round fired during the demonstration appears to be a live, which is somewhat concerning).

During the sequence, a shelter is visible within the mortar pit, which appears to match a similar structure seen in an Al-Kataib image.

Note the sandbag barrier, the wooden posts making up the doorway of the shelter, the makeshift cot inside the shelter, and the vehicle tire propped up against the HESCO barrier.

It appears that the demonstration for the NTV crew, which is conducted with a fair amount of joviality among the KDF soldiers, and is overseen by the new camp commander, takes place quite literally in a spot where al-Shabaab militants filmed a dead KDF soldier after overrunning the camp.


In another still taken from the NTV footage of the mortar pit, a blue structure is briefly seen in the background. This also appears to match a structure shown in the Al-Kataib images:

Blue building seen in the background during the NTV sequence filming a firing demonstration from the mortar pit.

The same blue structure, seen in a still image taken from the Al-Kataib imagery release from the attack.


The same blue building (revealed to be a makeshift church which Al-Shabaab militants are seen inside).



It is also possible to match three trucks and a water tanker, seen in the al-Kataib video, with imagery from the KDF drone feed, and from satellite imagery of the site. Tying all of these sources together further reinforces the assessments made here, that the base was in fact overrun, as per the al-Shabaab/Al-Kataib claims.

Three cargo trucks and a water tanker – seen in the Al-Kataib footage from the base attack, in the KDF drone footage shown during the NationTV report, and in the December 2016 satellite imagery.


In a The Nation article relating to the NTV visit to Kulbiyow, several stills taken by the press crew show the base on the ground and from the air. One image appeared to be a good candidate to match against the three trucks seen above – but appears to be slightly off target (and the trucks appear to have been moved in the 10 days since the attack). Nonetheless, the image shows noteworthy permanent structures, and one of the two prominent geographic features of the base – large pools of water – which are visible in the satellite image above.

An image from the Al-Kataib release, showing an Al-Shabaab militant (note the red scarf worn by the attackers) advancing toward a grey-roofed house – a rare permanent structure among all of the makeshift shelters and similar to one of the structures circled in red in the previous image.

Two Al-Shabaab militants carry an LMG mount past several vehicles. A green roofed house is visible on the right of the image – similar to the structure circled in green.

A second image taken from the Al-Kataib video, which has panned right from the previous image – note the green roofed house, the front of a HMMWV and red and white marker stick which are now on the left of the image. Further to the right of this image is a green shack, and a grey-roofed stone building – which appear to match the structures circled in corresponding colours above.


Within the HESCO barriers seen in the previous imagery is an artillery piece. Two such weapons are shown in more detail below, in the Al-Kataib imagery release.

An artillery piece, surrounded by HESCO barriers. Behind it, a structure is on fire. Also visible are the green shack and grey-roofed stone building as seen above.

These appear to be 105-mm L5 Pack Howitzers, derived from an Italian OTO Melara Mod 56. These may have been sourced from the UK military at some point, or they may be a Norinco-made Type 56 clones. The fate of these weapons is unknown.

Al-Shabaab militants seen milling around within the base, near a second artillery piece.


In another The Nation still image from the NTV press visit to the base in the aftermath of the battle, some KDF soldiers are photographed manning a post on the perimeter. On the right of the structure is a Carl Gustav launcher, presumably to guard against VBIEDs. The structure also appears to be the same that was seen in one of the Al-Shabaab still images from the attack which portrayed several dead KDF soldiers:


KDF machine gun team, presumably killed during the attack. Note the sandbag arrangement, the vertical uprights of the shelter itself (with notches on the wood) and the handmade bench.

As with the mortar pit – it is possible here to see KDF troops standing around in quite literally the same places that al-Shabaab militants stood to take pictures of dead KDF soldiers, while the new base commander leads a press tour, declaring that the base had not been overrun.

Concluding remarks

Verifying the location of the attack does not in turn automatically verify every aspect of the Al-Kataib video, or the al-Shabaab claims about the battle – but it appears fairly safe to conclude that that imagery is indeed really from Kulbiyow. That, in and of itself is interesting, since that imagery was released before the NTV piece, and interviews with the base commander.

In addition, it must be asked that, if not from Kulbiyow, where would that imagery have come from? What then was the mindset behind the KDF’s blanket denials of the authenticity of the imagery and decision to allow (and probably to lead) a press tour to reinforce their counter claims?

It should be noted that, as always, the imagery released by Al-Kataib, is fundamentally propaganda material. It is intended to convey a particular message, and could be purposefully manipulated and shaped to portray a particular narrative of events on that day. By the same token, the KDF is engaged in a military conflict, and some degree of misinformation or counter-intelligence is a natural and necessary part of that. However, the KDF claims about the course of the battle are also relevant to domestic media coverage of the conflict – and indeed, to political and civil-military oversight. If nothing else, there are serious questions to be asked about the treatment of the soldiers who were killed during the battle, and their families and loves ones in the aftermath of the fight.

At this stage, the following conclusions can be drawn: the KDF did not handily fend off the Al-Shabaab attack as it claims. The perimeter was indeed breached – and sufficiently so to allow the Al-Shabaab militants to loot the base, and to film itself doing so.

Sometime in the coming months (following previous release timetables for post-attack propaganda by Al-Shabaab through Al-Kataib), a video of the attack will likely be released. That video will  show the ground assault, probably from multiple camera angles – as al-Shabaab has done in previous attacks. It may give some clues as to the intensity of the fighting at the base perimeter, and inside the base. It may show whether KDF forces were coordinated in their defence, or not, and whether or not they retreated. Some media accounts, citing anonymous KDF personnel, claimed that portions of the defensive force retreated from the base, and presumably later returned. Such a scenario would best match what appears to be evident so far. In the mean time, the fact that al-Shabaab is able and willing to conduct such attacks is worrisome for the state of the conflict in Somalia. However, covering up such setbacks is not necessarily the best option to take.


UPDATE: Al-Shabaab did indeed later release a video showing the attack and subsequent overrunning of the KDF base at Kulbiyow. 

As predicted, this video heavily featured a propaganda sequence utilising video cut of parts of the NTV press tour, specifically where the new base commander narrates his claims that the militant VBIED was blown up 600m from the base, and that al-Shabaab did not even get close to the base perimeter. These are intercut with footage of al-Shabaab militants quite literally running through the smoldering remnants of a section of the base perimeter, that has presumably been demolished by at least one VBIED detonation. To say that the al-Kataib propaganda team places a heavy emphasis on this point is an understatement – they even include echoes of the base commander’s words while showing images of militants firing into the bodies of downed KDF soldiers. The mortar pit sequence of the NTV press tour similarly receives propaganda treatment.

Al-Shabaab militants seen moving and firing as they cross a blast-damaged section of the perimeter. It is possible that this was re-staged after the attack.

A closer look at a crater and severe blast damage to the perimeter of the base.

Part of a video sequence showing al-Shabaab militants moving and firing at KDF troops, visible fleeing toward or past the green-roofed stone building seen previously.

Al-Shabaab militants pass a water tanker, passing more familiar landmarks within the base: the green shack, and one of the grey-roofed buildings.

Footage of part of the camp burning.

Al-Shabaab seen looting the camp – in this video sequence, a WZ-551 armoured personnel carrier appears to be driven away by militants.