Exercise #021 · Active Threat · Multi-Jurisdictional · Targeted LE · February 3–12, 2013

The Christopher Dorner Manhunt

A trained LAPD officer with a 40-name target list, nine days across four counties, and the moment law enforcement shot its own public — twice in 25 minutes.

Incident period: Feb. 3–12, 2013Jurisdictions: 4 counties (Orange, LA, Riverside, San Bernardino)Officers killed: 2 — Crain (Riverside PD), MacKay (SBSD)Total killed: 4Civilians shot by LE: 2 (Torrance — both unrelated to suspect)Shots at wrong truck: 107 rounds at a blue Toyota TacomaLE protection details: 40+ named targets in manifestoResolved: Feb. 12, 2013 — Big Bear cabin standoff
Active ThreatOfficer KilledMulti-JurisdictionalCivilian Shot by LETargeted LESelf-Deployment

1Opening

By the time the first 911 call came in from Irvine on February 3, 2013, law enforcement already had the manifesto. Christopher Dorner — former LAPD officer, former Naval Reserve lieutenant — had distributed an 11,000-word document naming more than forty law enforcement personnel he intended to kill, describing his tactical training, and declaring unconventional warfare on the LAPD and its families.

This was not a suspect with unknown intentions. This was a suspect who had announced what he was going to do, named the people he was going to do it to, and then started doing it. That is the specific problem the Dorner manhunt poses for dispatch: what does it mean to operate inside a threat that understands your radio traffic, knows your protocols, is himself a trained dispatcher, and has pre-identified targets among the personnel you're protecting and dispatching?

The ordinary information asymmetry between law enforcement and a suspect had been inverted. Dorner knew more about how law enforcement would respond than most suspects do, because he had been law enforcement.

2Dispatch Timeline

What the comm center saw, and when. Color coding indicates the operational dimension.

Feb. 3, 2013
CRITICALMonica Quan and Keith Lawrence shot and killed in Irvine. Quan was the daughter of retired LAPD Captain Randal Quan, who had represented Dorner at his dismissal hearing. Dorner's manifesto, already distributed, had named Quan by name. The manhunt begins.
Feb. 6–7
GAPDorner attacks law enforcement officers in Corona and Riverside. Opens fire on two LAPD officers in Corona — one grazed, one injured by shattered glass. Minutes later, ambushes two Riverside Police Department officers, killing Officer Michael Crain and wounding his partner.
Feb. 7, ~5:30 AM
CRITICALLAPD officers on a protection detail in Torrance fire 107 rounds at a blue Toyota Tacoma. Occupants: Margie Carranza (47) and her mother Emma Hernandez (71), delivering newspapers. Officers believed the vehicle matched Dorner's truck. Hernandez shot twice in the back. Carranza wounded by glass.
Feb. 7, ~5:45 AM
CRITICALTorrance PD officers ram and fire on a second unrelated vehicle. Driver David Perdue, en route to surf, is rammed and shot at — not hit. His black Honda Ridgeline does not match Dorner's vehicle. Two separate civilian shooting incidents within 25 minutes.
Feb. 7
DISPATCHDorner's burning Nissan Titan found off a forestry road near Big Bear Lake — broken axle, rifles and camping gear inside. An army of law enforcement arrives in the mountains. Command post established at Bear Mountain ski resort. Nine days of mountain searches begin.
Feb. 7–11
GAPDorner is holed up in a vacation condo 200 yards from the law enforcement command post, watching search operations daily. Thousands of tips, door-to-door searches, thermal helicopter sweeps. No contact. Dorner evades the entire search.
Feb. 12, 12:23 PM
DISPATCHKaren Reynolds calls 911 from Mountain Vista Resort — she and her husband have been tied up by Dorner, who has been hiding in their condo for days. Dorner steals their vehicle. Southern California law enforcement mobilizes.
Feb. 12, ~1:00–3:00 PM
CRITICALDorner engages San Bernardino County Sheriff's deputies. Opens fire on two deputies — Detective Jeremiah MacKay killed, a second deputy wounded. Barricades in a cabin in Angelus Oaks. Deputies surround it. Tear gas deployed. Demolition vehicle used to collapse walls. Pyrotechnic canisters fired — cabin ignites.
Feb. 12, evening
COMMSRemains confirmed in burned cabin. Single gunshot wound to the head — self-inflicted. Dorner's identity confirmed by dental records February 14. SBSD confirms: the nine-day manhunt is over.

3The Dispatch Picture

The civilian shootings in Torrance on February 7 — two separate incidents within 25 minutes — are where the dispatch dimension of this exercise concentrates. Eight LAPD officers fired 107 rounds into a blue Toyota Tacoma driven by two women delivering newspapers, wounding both. Twenty-five minutes later, Torrance PD officers rammed a black Honda Ridgeline and fired on the driver, a man going surfing. Neither vehicle matched Dorner's. Neither occupant resembled him.

The officers had been deployed to an unfamiliar neighborhood with limited briefing, limited equipment, and a level of fear the District Attorney's memo described as justified given the threat level — but the outcome was two innocent civilians shot and a third traumatized by a vehicle ramming.

While law enforcement conducted an exhaustive search of the Big Bear area — door-to-door checks, helicopter thermal sweeps, thousands of tips — Dorner was watching from approximately 200 yards away, hiding in a vacation condo that sat directly across from the command post. He remained there for five days. The intelligence picture that dispatch and field operations were working from was fundamentally wrong throughout the search, and no one knew it.

On February 12, the manhunt ended the way it had threatened to from the first day. Dorner emerged from his hiding place, tied up the property owners who discovered him, and was eventually cornered in a cabin near Angelus Oaks. In the final standoff, San Bernardino County Sheriff's Detective Jeremiah MacKay was killed and another deputy wounded. The cabin caught fire. Dorner died inside from a self-inflicted gunshot wound.

"Officers were dispatched to unfamiliar territory with limited planning or tactical instruction and limited resources."— L.A. County District Attorney's memorandum on the Torrance civilian shooting, 2016

4Where Judgment Mattered

The manifesto is intelligence — treat it as such. Forty-plus named targets meant forty-plus active dispatch coordination tracks: protection details assigned and tracked, check-ins logged, calls involving named targets routed through elevated protocols. Tracking those details across nine days was a sustained dispatch function — not a one-time assignment.

Channel security matters when the suspect knows your protocols. Encrypted channels, code words, or alternative tactical channels for sensitive location and positioning information aren't exotic — they're standard protocol in high-stakes operations. The Dorner event is a case study in why.

Self-deployment risk is highest when officer safety is the threat narrative. When the threat targets law enforcement specifically, the instinct to converge is powerful. Distinguishing between formal mutual aid (requested, coordinated, documented) and self-deployment (officers responding without assignment) becomes harder as scale increases — and unit accountability degrades fast without active dispatch tracking.

The Torrance shootings were partly a deployment failure. Officers were sent to an unfamiliar area with limited briefing, inadequate equipment, and no coordinated tactical plan. Dispatch is part of the chain that produces deployment. When briefing information is thin, dispatch relaying what it has — and flagging what hasn't been transmitted — matters.

Tone management in sustained high-threat events has safety consequences. Urgent, alarm-laden radio traffic elevates officer arousal, which has known effects on threat perception. Maintaining urgency without transmitting panic is a professional skill, not a courtesy.

Extended manhunts operate on deteriorating information. For five days, Dorner was 200 yards from the command post. Searches were running on a last-known position that was five days old. The confidence of the operational picture should be calibrated to its age — and dispatch should be skeptical of "we have him contained" when contact has been zero for days.

The civilian caller is often the resolution point. Karen Reynolds's 911 call on February 12 was the only confirmed intelligence about Dorner's location produced during the entire nine-day Big Bear search. Everything before — tips, thermal sweeps, door-to-door — had not located him. A single hostage call from a tied-up civilian ended the manhunt.

5Discussion Questions

No right answers. Tap a question to expand the analysis. Use one or all — whatever fits your time.

1Dispatching into a threat that knows your playbookWhat does it mean for dispatch when the threat has insider knowledge of law enforcement operations — and what adaptations are appropriate when the suspect knows how you'll respond before you respond?

Most dispatch training is built around an information asymmetry: law enforcement has information the suspect doesn't. Dorner had partially inverted that asymmetry. He knew how LAPD dispatched calls, how protection details were organized, how radio traffic moved. That is a materially different threat profile than a suspect who is discovered, pursued, and apprehended.

The manifesto as advance intelligence. Dispatch centers and law enforcement had Dorner's target list before the killing started. The operational value of that document — identifying the forty-plus named targets, assigning and tracking protection details, maintaining situational awareness of which targets were most exposed — was a dispatch coordination function running in parallel with normal operations. The manifesto was intelligence. Treating it as such meant tracking which protection details were active, which targets were highest risk, and routing any call involving a named target through elevated protocols immediately.

Channel security in a threat with insider knowledge. Dorner's knowledge of radio protocol raises a question that applies in any situation where a suspect may be monitoring law enforcement communications: what information can safely be broadcast over channels the suspect may have access to? Encrypted channels, code words, or alternative channels for tactical coordination aren't exotic — they're standard protocol in high-stakes operations.

Self-deployment risk increases when officer safety is the threat narrative. When the threat is specifically targeting law enforcement, the instinct of officers to respond — to protect colleagues, to engage a threat against their own community — is powerful. Self-deployment is a documented problem in critical incidents, and it is most acute when officers are personally threatened. Dispatch maintaining awareness of who is actually assigned to what — versus who has converged on a scene without authorization — is harder when the emotional charge of the event pushes against the discipline of the dispatch system.

Protection details as a dispatch coordination function. Over forty named targets required protection. Each protection detail was a unit assignment, with location, personnel, and communication requirements. The Torrance civilian shooting partly resulted from officers deployed to an unfamiliar area with limited briefing — a dispatch coordination failure, not just an officer decision failure.

2When law enforcement shoots the wrong personOfficers in Torrance shot innocent civilians twice within 25 minutes — once firing 107 rounds at two women delivering newspapers, once ramming and firing on a man driving to the beach. What is the dispatch-level failure mode that contributed, and how should dispatch think about its role in maintaining identification discipline during a high-threat manhunt?

The Torrance civilian shootings are often discussed as officer-level failures — impaired judgment under stress, poor threat identification, excessive force. That analysis is accurate as far as it goes. But the District Attorney's memo identifies a systemic dimension: officers were deployed to an unfamiliar area with limited briefing, inadequate equipment for the threat level, and no coordinated tactical plan. Dispatch is part of the chain that produces that deployment.

The briefing failure was a deployment failure. Officers sent to provide a protection detail in Torrance were given an assignment without the supporting context: what exactly is the threat right now, what does the target vehicle actually look like, what are the specific rules of engagement? When officers are being rapidly deployed from unfamiliar units in a compressed timeline, dispatch is often the last line of communication before an officer is placed in the field. If the briefing information is thin, dispatch relaying what it has — and flagging what hasn't been transmitted — matters.

Vehicle description management in a rolling manhunt is a dispatch function. Dorner's vehicle was a dark Nissan Titan. The vehicles shot in Torrance were a light blue Toyota Tacoma and a black Honda Ridgeline. Color discrepancy alone should have been a significant hesitation point. The critical question for dispatch: what was actually broadcast, how precisely was the description conveyed, and was there any mechanism for officers in the field to confirm identity before use of force?

Fear state and how it travels through communications. The DA's memo noted that 'the fear of Dorner was understandable and justified.' That fear moved through the system — radio traffic, briefings, interpersonal communication. Dispatch is part of that system. Urgent, alarm-laden radio traffic elevates officer arousal, which has known effects on threat perception. How dispatch manages tone during a prolonged high-threat event — maintaining urgency without transmitting panic — is a professional skill that has real safety consequences.

After a civilian shooting, dispatch coordination continues. Once it was clear that civilians had been shot, dispatch faced multiple simultaneous tracks: continue the manhunt coordination, coordinate medical response for the shooting victims, and manage the scene of a law-enforcement-involved shooting — all while the actual suspect remained at large.

3Multi-jurisdictional manhunt across shifting geographyWhat does multi-jurisdictional coordination look like from a dispatch perspective during a sustained manhunt where the suspect is actively moving across agency boundaries — and how does the picture change when you know the suspect is deliberately using jurisdictional seams?

Dorner's movement across four counties was not random. His manifesto showed an understanding of law enforcement organizational structure. Moving from Irvine to Corona and Riverside to Big Bear kept him operating across the boundaries of agencies that, while cooperating, had different command structures, different radio systems, and different situational pictures. The jurisdictional seam is a real vulnerability in law enforcement response, and Dorner, as a former officer, knew it existed.

Dispatch-to-dispatch coordination is not automatic. When a suspect crosses a county line, the dispatchers on each side don't automatically share information in real time. The mechanisms for cross-jurisdictional communication — shared channels, mutual aid protocols, liaison officers at command posts — have to be activated. In a planned emergency, this is orderly. In a rapidly developing manhunt, it depends heavily on whether the receiving dispatch center has been notified and what information they've been given.

The command post at Bear Mountain ski resort as a coordination node. During the Big Bear phase, SBSD established a command post that functioned as the operational hub for the mountain search. Dispatch coordinated through that command post, which effectively became a regional coordination layer above normal dispatch operations. Understanding when a command post takes precedence over normal dispatch routing — and when dispatch still has independent responsibilities that aren't visible to the command post — is a critical operational question in extended incidents.

Mutual aid and self-deployment look the same on the radio. During a high-profile manhunt involving threats to law enforcement, officers from multiple agencies converge. Some is formal mutual aid — requested, coordinated, documented. Some is self-deployment. From dispatch's perspective, distinguishing between the two in real time is difficult. Maintaining accurate unit accountability becomes harder as incident scale increases.

Information about Dorner's location was consistently wrong. For five days, Dorner was 200 yards from the command post. Law enforcement was conducting searches based on a last-known position that was five days old. The confidence of the operational picture should be calibrated to its age.

4The 911 call that ended the manhuntWhat does the Reynolds 911 call represent about caller-as-first-intelligence-source in a sustained manhunt — and how should dispatch handle a hostage-situation call that is simultaneously the most significant development in a nine-day multi-agency manhunt?

Karen Reynolds had been tied up, gagged, and held with a pillowcase over her head. She freed herself enough to reach her phone and called 911. That call was simultaneously: a hostage situation report, a carjacking report, a missing person update (Dorner's location was now known for the first time in five days), and the initiating event for the final phase of the most significant law enforcement manhunt in Southern California in decades.

Caller-as-first-intelligence is the dispatch norm, not the exception. The most important new information about a developing situation often arrives through a 911 call from a civilian who doesn't know its operational significance. Karen Reynolds knew she had been tied up by someone. Dispatch knew that Dorner was at large in the Big Bear area. The significance of the call was not visible in the call itself — it became visible when the call was connected to the existing operational picture.

The initial report was a carjacking call. SBSD dispatchers received the Reynolds call and began responding to it as a carjacking — which it was. The vehicle description, direction of travel, and rapid mobilization all tracked against a carjacking protocol. The operational overlay — that this vehicle was being driven by a fugitive who had already killed three people — had to be connected to the carjacking call by dispatch, not assumed to be already integrated.

Communicating significance without adding confusion. When dispatch recognizes that a routine-presenting call has major operational significance, the challenge is communicating that significance to every relevant unit and command level without creating confusion, duplicate responses, or channel saturation. The broadcast that says 'we have a carjacking' and the broadcast that says 'Dorner's location has been confirmed — units are moving to intercept' are different communications serving different audiences.

Caller welfare during a high-consequence relay. Karen Reynolds called while still in acute distress. Dispatch managing the dual tasks of extracting the most operationally critical information from her (vehicle description, direction of travel, weapons) while also ensuring her safety is a call-taking challenge that has direct operational consequences. A caller who can't communicate clearly because they're being managed poorly is a caller who produces less actionable intelligence.

6Knowledge Check

Five questions. Answer, then submit for inline feedback. Progress saves locally.

Q1.Christopher Dorner's manifesto named over 40 law enforcement targets before the killing began. From a dispatch coordination standpoint, what is the most important operational use of that list?
Q2.Eight LAPD officers fired 107 rounds at a blue Toyota Tacoma carrying two women delivering newspapers. The DA's review found officers were deployed with 'limited planning or tactical instruction.' Which dispatch-level factor most directly contributed to the conditions that produced this shooting?
Q3.True or False: During a multi-jurisdictional manhunt, officers from cooperating agencies who respond to the area are automatically integrated into dispatch coordination through mutual aid protocols.
Q4.Karen Reynolds called 911 at 12:23 PM on February 12 to report that she and her husband had been tied up. This was simultaneously a hostage call and the first confirmed intelligence on Dorner's location in five days. What is dispatch's most important action in the first 60 seconds of this call?
Q5.During a sustained manhunt where the suspect is a former law enforcement officer with knowledge of radio protocols, which dispatch adaptation is most operationally justified?

7Sources & Further Reading

After-Action & Institutional Analysis
Police Foundation — comprehensive institutional review of law enforcement response, command structure, self-deployment, multi-jurisdictional coordination
Center for Homeland Defense and Security — multiple after-action and crisis communications analyses
Civilian Shootings — Legal Record
Los Angeles County District Attorney, 2016 — 52-page review of the Torrance civilian shooting, deployment context, officer findings, legal conclusions. Key primary source on the operational chain failure.
Reporting & Timeline
Los Angeles Times, 2013–2014 — comprehensive contemporaneous and retrospective coverage of the manhunt, civilian shootings, and law enforcement response
NBC Los Angeles, 2013 — detailed day-by-day timeline of the manhunt from initial killings through final identification
Reference
Wikipedia (extensively cited) — detailed timeline and sourced overview of the full incident

8Your Notes

📝 Take a note
Saved locally in your browser. Prints with the exercise.