1.5.1-SSJ_Redacted.pdf

OFFICE OF ACQUISITION MANAGEMENT

ICE Acquisition Manual 3006.301-90

SOLE SOURCE JUSTIFICATION: SIMPLIFIED PROCEDURES FOR CERTAIN

COMMERCIAL ITEMS EXCEEDING SAT, INCLUDING BRAND NAME

J&A-25-0151

In accordance with the procedures of FAR Subpart 13.5, using the statutory authority of 41 USC 1901, and consistent with the content requirements of FAR 6.303-2, this justification is based on the following facts and rationale:

1. Agency and Contracting Activity.

The Department of Homeland Security (DHS), Immigration and Customs Enforcement (ICE), Office of Acquisition Management (OAQ), proposes to enter into a contract on behalf of the Homeland Security Investigations (HSI) Cyber Crimes Center (C3) on a basis of other than full and open competition.

2. Nature and/or description of the action being approved.

(a) Type of action: New, Firm-Fixed Price (FFP) Purchase Order

(b) Amount the current J&A is justifying:

(c) Brief Description: OAQ intends to procure, on a sole source basis, a memory analysis software application and a digital forensics software application as part of the training requirements of the Computer Intrusion Response program (CIRP) to analyze data collected from multiple operation systems using simplified acquisition procedures. The vendor listed below is the only company that can provide the required licenses.

Volexity, Inc.

11654 Plaza America Dr #774 Reston, VA 20190

3. Description of Supplies/Services. Describe the supplies or services to be acquired.

Provide the estimated total value (including options, if any).

This requirement is to provide the following:

Eight (8) Volexity Volcano Server Licenses, which is a memory analysis software application for investigating and visualizing the digital data found in random access memory (RAM), providing the capability to extract, reconstruct, and visualize the data structures and other artifacts found in main memory into interpretable information to assist in cyber investigations.

Eight (8) Volexity Surge Licenses, which is a software application for acquiring digital forensics data from suspected systems. It is a command-line tool that obtains critical memory samples, specified files, runtime state information obtained from APIs, and other artifacts from target computers. It collects system memory in a forensically sound process that meets U.S. judicial evidence standards. It creates auxiliary files, including metadata related to the memory sample and target system, along with a list of hashes that verify the collected data has not been modified. The

OFFICE OF ACQUISITION MANAGEMENT

ICE Acquisition Manual 3006.301-90

SOLE SOURCE JUSTIFICATION: SIMPLIFIED PROCEDURES FOR CERTAIN

COMMERCIAL ITEMS EXCEEDING SAT, INCLUDING BRAND NAME

OAQ intends to make this justification publicly available pursuant to FAR 6.305 on SAM.gov no later than fourteen (14) days after award.

7. Determination by the contracting officer that the anticipated cost to the Government will be fair and reasonable.

The Contracting Officer determined that the anticipated price(s) will be fair and reasonable based on market research and historical pricing found on similar previous purchases. The Contracting Officer may also base the determination on: current price lists, catalogs, advertisements, comparison with similar items in a related industry; the Contracting Officer’s personal knowledge of the item being purchased; the independent Government estimate (IGE), and/or any other reasonable basis to determine that the price at the time of award represents the overall best value for the government and is fair and reasonable.

8. Description of market research.

Market research was conducted during the period of March 1, 2025 - June 11, 2025. HSI C3 found potential alternative products, such as Volatility Framework, Access Data FTK, and X-Ways Forensics, but they do not offer the same type of features as the Volcano Professional and Surge services, specified in Section 5. Sole source letters were obtained from Volexity, Inc., which stated that they are the sole developers of the licenses, and they do not have authorized resellers or distributors. A notice of intent to solicit from a single source was also posted to SAM.gov on June 4, 2025, with a closing date of June 11, 2025.

No parties expressed interest.

9. Any other facts supporting the justification.

Not applicable.

10. A listing of the sources, if any that expressed, in writing, an interest in the acquisition.

An intent to solicit from a single source was also posted to SAM.gov on June 4, 2025, with a closing date of June 11, 2025. No parties expressed interest.

11. A statement of the actions, if any, the agency may take to remove or overcome any barriers to competition before any subsequent acquisition for supplies or services required.

HSI C3 will continue to monitor the market for new entrants, authorized distributors and resellers and new products/software into the field that can meet the requirement.

12. DHS intends to post the requirement pursuant to FAR 13.501(a)(1)(iii) and 6.305(a).