Department of Homeland Security

Homeland Security Investigations (HSI)

Headquarters (HQ), Div 4 Cyber Crimes Center (C3)

STATEMENT OF NEED

1. TASK TITLE

Cellebrite Certification Training (HERO)

2. BACKGROUND

Homeland Security Investigations (HSI) is the premier federal law enforcement agency within the Department of Homeland Security (DHS) and protects national security by enforcing the nation's immigration and customs laws. One of the leading priorities of

HSI is to combat criminal activity conducted on or facilitated by the Internet. The HSI

Cyber Crimes Center (C3) delivers computer-based technical services to HSI components to support domestic and international investigations into cross-border crime. C3 is comprised of the Cyber Crimes Unit (CCU), the Child Exploitation Investigation Unit

(CEIU), the Computer Forensics Unit (CFU) and the Cyber Intelligence Unit (CYIU).

This state-of-the-art center offers cyber-crime support and training to federal, state, local and international law enforcement agencies. C3 also includes a fully equipped computer forensics laboratory, which specializes in digital evidence recovery. In addition, C3 provides comprehensive training in advanced cyber investigative techniques and digital forensic skills.

3. GENERAL SCOPE

The Human Exploitation Rescue Operation (HERO) Child Rescue Corps program is a congressionally funded and mandated initiative to train and employ disabled U.S.

veterans and transitioning service members with a VA/DoD disability rating. HERO participants complete an intensive 11-week computer forensics training at the HSI Cyber

Crimes Center (C3), covering digital forensics, child exploitation investigation techniques, mobile device analysis, forensic software tools, legal considerations, and investigative procedures. Following training, interns are embedded in HSI field offices for a nine-month internship, where they gain hands-on experience assisting HSI special agents in locating victims of child sexual abuse and exploitation and identifying individuals involved in the production, distribution, and possession of child exploitation material.

As part of the forensics training, it is required for certification purposes that the Cellebrite mobile forensics training be provided by the Cellebrite to meet the requirement for certification. This is one of the primary forensic tools used by HSI CFAs and without the expert training and proper certification, issues could arise later in court that could result in the dismissal of criminal prosecutions if training of new CFAs is called into question.

Cellebrite Certified Operator for Inseyets (CCO Inseyets) is a two-day intermediate-level certification course that introduces mobile device unlocking, decrypting, and extraction techniques using Inseyets UFED. The course guides participants through pre-extraction considerations that allow examiners to maximize their extraction efforts and protect the potential evidentiary data stored on mobile devices. Participants will gain experience conducting Logical, File System, and Physical extractions using forensically sound methods, and learn techniques related to Before First Unlock (BFU) and After First

Unlock (AFU) and apply advanced extraction strategies on locked devices. Finally, participants will create a shareable UFDR report to streamline the investigative process and discuss post extraction evidence concerns.

Cellebrite Certified Physical Analyst for Inseyets (CCPA Inseyets) is a three-day advanced-level certification course focused on the analysis of forensically acquired digital evidence and advanced search techniques using Inseyets Physical Analyzer

(Inseyets PA). Participants will use Inseyets PA to create and manage cases and load evidence to view and analyze Android and iOS extraction data. Using the SQLite database view, participants will explore database contents to find and recover deleted data. The course includes forensic analysis best practices with an overview of verification and validation techniques along with forensic reporting.

Cellebrite Advanced Smartphone Analysis (CASA) with Inseyets is a five-day advanced level course designed to provide training in forensic recovery and analysis of application data from smartphone extractions. The CASA Inseyets class leverages Inseyets Physical

Analyzer (Inseyets PA) capabilities to explore database contents, and uses third-party, open-source tools and Python scripting to decode information not commonly decoded by forensic tools. In this course, examiners will decode both iOS and Android specific applications to perform pattern-of-life analysis and validate findings.

4. REQUIREMENTS DESCRIPTION

The DHS Cyber Crimes Center has a requirement on a limited source basis to procure

Cellebrite products and services in support of the Computer Forensics Program as seen below:

Description Unit of

Measure

Quantity Training Dates Target

Audience

In-Person/Virtual CCO+CCPA

Inseyets (5 days)

EA

July 27, 2026 –

July 31, 2026

HSI HERO

In-Person/Virtual (CASA) –

Advanced Smartphone

Analysis Inseyets (5 days)

EA

August 3, 2026 –

August 7, 2026

HSI HERO

5. DELIVERABLES

The Contractor shall deliver products and services no later than 30 calendar days from date of award. All task/products, unless otherwise specified by the COR, will be performed at/shipped to:

Nicholas Peruzzini

DHS- HSI Cyber Crimes Center (C3)

11320 Random Hills Rd., Suite 400

Fairfax, VA 22030

Telephone: (716) 583-0084

Nicholas.M.Peruzzini@hsi.dhs.gov

6. PERIOD OF PERFORMANCE

Base Period: July 27, 2026 – August 7, 2026

7. INVOICING AND PAYMENT

Invoice can be submitted after delivery of the product and paid in accordance with the

Prompt Payment Act. The government typically pays in 21 days, but no later than 30 days after approving invoice.

8. PROCUREMENT POINT OF CONTACT

Kimberly Wright-Whitson

11320 Random Hills Rd., Suite 525

Fairfax, VA 22030

Telephone: (703) 718-1940 kimberly-wright-whitson@hsi.dhs.gov

9. TECHNICAL POINT OF CONTACT

Nicholas Peruzzini

11320 Random Hills Rd., Suite 400

Fairfax, VA 22030

Telephone: (716) 583-0084

Nicholas.M.Peruzzini@hsi.dhs.gov mailto:Nicholas.M.Peruzzini@hsi.dhs.gov mailto:kimberly-wright-whitson@hsi.dhs.gov