Attachment 1- SOW.pdf

Statement of Work (SOW) Project: 6 CS MDT Threat Detection Training

Dated: 23 July 2020

GENERAL INFORMATION

1.0 Scope of Work: The Mission Defense Team requests training for 10 members in a virtual environment on Intrusion

Detection Systems, ELK Stack software, packet capturing/analysis, and cyber threat hunting.

2.0 Background: The Mission Defense Team has built a threat detection package (ie. weapon system), the team does not have the training required to integrate it into operations. The tools are very complex and require specialized training. The training will provide an immense boost in cyber capabilities. The course teaches network security monitoring with the latest technologies to perform full-spectrum threat detection and hunting. The course focuses on the DoD’s mission of threat hunting in unique contested networks. The instructors of this course consist of the actual developers of the weapon system to be trained on. This training will allow the Mission Defense Team to defend the areas not covered by AFCYBER, including commercial internet and stand-alone systems for the KC- 135, fuels management, command post, weather, and wing scheduling.

CONTRACTOR REQUIREMENTS

3.0 Technical Requirements/Tasks:

The vendor must offer education and training over 5 consecutive days on the following subjects (final class dates will be determined after award):

• Education and Training on Intrusion Detection Systems

• Training on the Following software o Elasticsearch o Logstash o Kibana o Zeek

• Packet Capturing/Analysis

• Cyber Threat Hunting

Key Deliverable

Item No.

Deliverable

Objective

Due

1 Finalized Class Syllabus and outline

Contractor shall provide a Finalized Class Syllabus and Outline of Course Material to cover all items in section 3.0

No later than 2 weeks prior to scheduled class start date.

4.0 Travel: There are no travel requirement since the training will be conducted virtually. The vendor must specify the computer requirements so all members can access the virtual training environment.

5.0 Security Requirements: There are no security clearance requirements for this training.

6.0 Section 508 – Electronic and Information Technology Standards:

The vendor must specify the computer requirements so all members can access the virtual training environment.