Intent to Sole Source MSAB.rtf

vbAny vendor wishing to respondSAP file_0.png file_1.wmf

State of South Carolina

INTENT TO AWARD

SOLE SOURCE

Solicitation:

Date Issued:

Procurement Officer:

Phone:

E-Mail Address:

Mailing Address:

Procurement Director:

5400020650 12/2/2020

RUTHIE H. BISHOP, CPPB

803-748-5498 purchasing@doc.sc.gov SC Department of Corrections Attn: Purchasing Branch Ruthie Bishop, CPPB DESCRIPTION: Intent to Award Sole Source – MSAB, Incorporated USING GOVERNMENTAL UNIT: The SC Department of Corrections The Term "Offer" Means Your "Bid" or "Proposal". Your offer must be submitted in a sealed package. Solicitation Number & Opening Date must appear on package exterior. See "Submitting Your Paper Offer or Modification" provision.

SUBMIT YOUR SEALED OFFER TO EITHER OF THE FOLLOWING ADDRESSES:

MAILING ADDRESS:

SC Department of Corrections Attn: Purchasing Branch 4420 Broad River Road Columbia SC 29210

PHYSICAL ADDRESS:

SC Department of Corrections Attn: Purchasing Branch 4420 Broad River Road Columbia SC 29210 RESPONSE PERIOD ENDS AND MUST BE SUBMITTED BY (Opening Date/Time): 01/05/2021 @ 10:00:00a.m. (See "Deadline For Submission Of Offer" provision)

YOUR RESPONSE TO THIS SOLE SOURCE MAY BE EMAILED TO:

purchasing@doc.sc.gov

SUBJECT LINE MUST STATE SOLE SOURCE

*********NOT TO BE SENT TO BUYERS EMAIL ADDRESS***********

If you are aggrieved in connection with the intended award you must also provide documentation that you are authorized to or can perform all aspects of the content required. This is not an opportunity to bid.

CONFERENCE TYPE: Not Applicable

DATE & TIME:

(As appropriate, see "Conferences - Pre-Bid/Proposal" & "Site Visit" provisions) LOCATION: Not Applicable

AWARD & AMENDMENTS

The Award becomes effective after opening / date and time if no responses are received. The award, this solicitation, any amendments, and any related notices will be posted at the following web address: http://www.procurement.sc.gov You must submit a signed copy of this form with Your Offer. By signing, You agree to be bound by the terms of the Solicitation. You agree to hold Your Offer open for a minimum of thirty (30) calendar days after the Opening Date. (See "Signing Your Offer" provision.)

NAME OF OFFEROR

(full legal name of business submitting the offer) Any award issued will be issued to, and the contract will be formed with, the entity identified as the Offeror. The entity named as the offeror must be a single and distinct legal entity. Do not use the name of a branch office or a division of a larger entity if the branch or division is not a separate legal entity, i.e., a separate corporation, partnership, sole proprietorship, etc.

AUTHORIZED SIGNATURE

(Person must be authorized to submit binding offer to contract on behalf of Offeror.)

DATE SIGNED

TITLE

(business title of person signing above)

STATE VENDOR NO.

(Register to Obtain S.C. Vendor No. at www.procurement.sc.gov)

PRINTED NAME

(printed name of person signing above)

STATE OF INCORPORATION

(If you are a corporation, identify the state of incorporation.)

OFFEROR'S TYPE OF ENTITY: (Check one) (See "Signing Your Offer" provision.)

___ Sole Proprietorship ___ Partnership ___ Other_____________________________

___ Corporate entity (not tax-exempt) ___ Corporation (tax-exempt) ___ Government entity (federal, state, or local)

COVER PAGE - PAPER ONLY (MAR. 2015)

SAP

SAP

PAGE TWO

(Return Page Two with Your Offer) HOME OFFICE ADDRESS (Address for offeror's home office / principal place of business)

NOTICE ADDRESS (Address to which all procurement and contract related notices should be sent.) (See "Notice" clause)

_________________________________________________ Area Code - Number - Extension Facsimile

_________________________________________________ E-mail Address

PAYMENT ADDRESS (Address to which payments will be sent.) (See "Payment" clause)

____Payment Address same as Home Office Address ____Payment Address same as Notice Address (check only one) ORDER ADDRESS (Address to which purchase orders will be sent) (See "Purchase Orders and "Contract Documents" clauses)

____Order Address same as Home Office Address ____Order Address same as Notice Address (check only one)

ACKNOWLEDGMENT OF AMENDMENTS

Offerors acknowledges receipt of amendments by indicating amendment number and its date of issue. (See "Amendments to Solicitation" Provision) Amendment No.

Amendment Issue Date Amendment No.

Amendment Issue Date Amendment No.

Amendment Issue Date Amendment No.

Amendment Issue Date

DISCOUNT FOR PROMPT PAYMENT

(See "Discount for Prompt Payment" clause) 10 Calendar Days (%) 20 Calendar Days (%) 30 Calendar Days (%) _____Calendar Days (%) PREFERENCES - A NOTICE TO VENDORS (SEP. 2009): On June 16, 2009, the South Carolina General Assembly rewrote the law governing preferences available to in-state vendors, vendors using in-state subcontractors, and vendors selling in-state or US end products. This law appears in Section 11-35-1524 of the South Carolina Code of Laws. A summary of the new preferences is available at www.procurement.sc.gov/preferences . ALL THE PREFERENCES MUST BE CLAIMED AND ARE APPLIED BY LINE ITEM, REGARDLESS OF WHETHER AWARD IS MADE BY ITEM OR LOT. VENDORS ARE CAUTIONED TO CAREFULLY REVIEW THE STATUTE BEFORE CLAIMING ANY PREFERENCES. THE REQUIREMENTS TO QUALIFY HAVE CHANGED. IF YOU REQUEST A PREFERENCE, YOU ARE CERTIFYING THAT YOUR OFFER QUALIFIES FOR THE PREFERENCE YOU'VE CLAIMED. IMPROPERLY REQUESTING A PREFERENCE CAN HAVE SERIOUS CONSEQUENCES. [11-35-1524(E)(4)&(6)] NOT APPLICABLE PREFERENCES - ADDRESS AND PHONE OF IN-STATE OFFICE: Please provide the address and phone number for your in-state office in the space provided below. An in-state office is necessary to claim either the Resident Vendor Preference (11-35-1524(C)(1)(i)&(ii)) or the Resident Contractor Preference (11-35-1524(C)(1)(iii)). Accordingly, you must provide this information to qualify for the preference. An in-state office is not required, but can be beneficial, if you are claiming the Resident Subcontractor Preference (11-35-1524(D)).

NOT APPLICABLE

____In-State Office Address same as Home Office Address ____In-State Office Address same as Notice Address (check only one)

PAGE TWO (SEP 2009)

End of PAGE TWO

Page Page

Intent to Award Sole Source

SOUTH CAROLINA DEPARTMENT OF CORRECTIONS

The South Carolina Department of Corrections intends to Award a Sole Source to MSAB, Incorporated for the procurement of the MSAB Mobile Forensic Ecosystem. All platforms and licenses within the system are proprietary. MSAB, Inc. is the only authorized distributors and seller of the MSAB Ecosystem, all its components, training and customer support The comprehensive MSAB Ecosystem comprises three platforms, each purpose-built for a specific mobile forensic environment. Each platform combines tools from MSAB’s XRY (Extract and Decode), XAMN (Analyze), XEC (Manage) product suites, and is built on the secure .XRY file format, ensuring full forensic audit trail and evidence protection. The MSAB Ecosystem is a holistic solution structured to address all mobile forensic needs.

The Salient Factors stated below are highlighted.

XRY UPDATES, SUPPORTED DEVICES AND APPS

MSAB releases new versions of XRY one to three times each quarter, to constantly expand the number of supported devices and 3rd party applications.

As of December 1, 2020, the totals are:

32,910 supported devices currently listed in our device manual

9,665 devices for logical extraction 6,121 devices for physical extraction 5,673 devices for passcode extraction or bypass 1,749 manufacturers across 42 operating systems and 8 form factors 42 different operating systems with 36 different generic profiles for extended support 392 unique smartphone apps in which we support 3,752 fully tested different versions across 6 unique operating systems

MSAB device support includes phones, tablets, drones, cloud, GPS devices, modems, smartwatches, SIM cards, external storage mediums, and many other smart IoT devices.

XRY GENERIC PROFILES

MSAB has created Generic Profiles allow for extraction and decoding of a vast number of other devices including Android, iOS, KaiOS, Blackberry, Nokia, Samsung, and Windows-based devices and those devices with Coolsand, Infineon, Spreadtrum, MediaTek, and Qualcomm chipsets.

XRY EXTRACTION AND DECODING

Simultaneous Extractions: XRY allows users to perform three simultaneous extractions with a single license key, saving critical time when multiple mobile devices need to be processed.

Fastest Extraction and Decoding Times in the Market: XRY can utilize the latest USB3 devices for rapid extraction in record time and still recover more data with our industry-leading decoding support for apps.

Secure Files: The XRY file is a forensically secure container which inherently prevents alterations, thus preserving the integrity of evidence.

Transparency: XRY produces a detailed, open, and fully transparent audit log that can be used to facilitate testimony in court, or to verify any procedures done by a third party.

True File Decoding: XRY verifies the file type of each piece of data by reading the Header and Footer within the raw data, as opposed to trusting the file extension, which can be deliberately altered for nefarious purposes.

XRY Photon: This unique capability provides the ability to extract data from almost any Android app, even if the app is not natively supported, nor accessible by traditional forensic methods.

WiFi Extraction: With Android devices, XRY has the unique ability to recover data over the air via WiFi hotspot connection. This is especially important if the communication port is broken or intentionally disabled on the device.

Universal Compatibility: XRY users can use any USB port on their Windows device to perform device extractions; no additional hardware is required. Additionally, MSAB products use Microsoft-certified USB Drivers, ensuring safe data extraction for both the forensic computer and the mobile device and compatibility with other forensic software installed on the same computer.

Customized Interface: XRY can have a fully customizable workflow built into the interface to meet specific organizational policies including, for example, automating digital document reports at the end of the extraction process.

Social Responsibility: MSAB follows all US and UN-based export protocols. We do not sell our technology to states and/or agencies that are on a prohibited list or have been flagged for having records of human rights abuses.

iOS Exploits: MSAB has developed and is implementing a variation of the Checkm8 exploit, Check3rs, that is capable of performing a full file system extraction from Apple products up to 20% faster than the current CheckRa1n exploit with greatly reduced risk of damaging a device during the extraction process.

Pre-Extraction of Media Files: XRY allows for pre-extraction viewing of all photos, videos, and audio files. This means that as soon as you plug the device in the investigator will be able to view all pictures, video and audio files, select ones of interest, and immediately extract them into a forensic report.

Customized Category and Time: XRY allows users during the pre-extraction setup process to select specific file categories and a date/time range to limit the scope of a search.

Fastest Image Decoding: XRY decodes images with automated image recognition up to 20 times faster with Nvidia CUDA enabled GPU’s.

Pre-Indexed Files: XRY files are pre-indexed for immediate opening and re-opening. This process occurs during the extraction and decode process so that once the investigator has the file, they never have to wait for the file or data artifacts to re-decode, which can take an extensive amount of time.

Support for iOS 14: XRY supports the latest version of iOS 14.

Top Support for Chinese Clone Phones: XRY has top level support for Chinese Chipsets like MTK, Spreadstrum, Coolsand, and Infineon, often found in corrections agencies.

Triage Profiles: XRY can be customized to decode specific categories of data by using our “Triage Profiles” to save time while in the field. Rapid extraction capability and specific workflows are built for extremely fast extractions.

No Decode Option: XRY has the option for a “No Decode” to extract the entire device quickly, and then decode later when a user has more time.

Re-Decode Extractions: XRY allows you to re-decode previously acquired extractions using a "better" profile when such profile becomes available to decode data from the latest applications.

Case File with Multiple Extractions for a Single Investigation: Save multiple extraction in a single secure case file with no limitation.

Enhanced Decoding: XRY has superior decoding technology; the MSAB platforms decode pictures, audio files, video, apps, PList, SQLite database and embedded files.

More Data from Email Files: XRY has the highest level of support for .pst .eml .emlx and .mbox email files.

Decodes Data Even When iTunes Backup Encryption is on: Retrieval and decoding of data from iOS-based devices even if iTunes Backup Encryption is enabled.

WIFI / Bluetooth Extraction Even If Port is Broken: Ability to recover data over the air via WIFI and Bluetooth on Androids when a communication port is damaged.

High Definition Camera: All platforms are available with the high definition camera-based input into the same file format to allow for additional supporting evidence of screenshots and unique device markings.

Import: Decoding of physical extractions performed by other tools, including JTAGs, chip-offs, and binary files.

Security Code: Logical & physical extractions with security code bypass options.

SIM Card: Recovery of the Integrated Circuit Card Identifier (ICCID), the International Mobile Subscriber Identity (IMSI) and all other data stored on the SIM card.

SD Memory Card: Logical & physical extraction support.

Apps: Full support for smartphone apps including the ability to perform App Downgrades (Android).

XAMN ANALYSIS

XAMN has an image recognition engine, which classifies images into categories such as drugs, weapons, tattoos, etc.

XAMN allows you to filter by location to find data within a selected geo-range.

XAMN can identify deleted SQL database records.

XAMN performs “sounds-like” searching and matching of Latin based languages.

XAMN includes a XML and PList database viewer.

XAMN automatically decodes QR 3D barcodes.

XAMN includes fully certified support for the import and export of child exploitation hash indexes for Project VIC.

XAMN uses the modern Python v3.4.3.

XAMN Case Mode securely handles and monitors all changes made to an extraction in a case folder.

Language Translation supports translation of over 25 languages offline.

XAMN solution includes offline maps. No internet access is required.

XAMN can produce customized reports in PDF, HTML, XML, Excel, Word, Nuix, Google Earth, and other formats.

XAMN can save the report on the device directly as well as any external media connected to the device.

Additionally, through the XEC Director service (which SC DOC is looking to purchase), the extraction data can be automatically routed to PenLink’s larger analytical tool PLX, and storage databases, without any user interaction.

XAMN analytical product is also updated frequently (several times each year) with new features and functionality to make it easier for investigators to search for and find the data that matters in the often-overwhelming volume of data artifacts now being recovered from modern smartphones.

MSAB offers a no-install, license free, executable version of the XAMN solution. This portable format allows users without a license to review, filter, search, tag, and report on an XRY extraction.

XAMN provides several analytical capabilities that are built into the solution at no extra charge:

Link Analysis Conversation View – that is in a bubble fields like what you view on a device. A report can be created in conversation view as well.

XEC DIRECTOR- (NETWORKING / MANAGEMENT CAPABILITIES)

XEC Director is the central management and administration solution that will allow SC DOC to take control of its mobile forensic infrastructure with cost effective supervision. The XEC Director Solution supports all MSAB’s extraction platforms, and any additional licenses that may be purchased can be connected to the XEC Director Solution to allow SC DOC to centrally manage all MSAB licenses.

MSAB’s XEC Director centralized management is a mobile forensic enterprise management tool with Active Director integration.

MSAB’s XEC Director centralized management solutions offers Permission control at this granular of a level.

In addition to the creation and management of users, groups, and the enterprise, the XEC Director solution also offers the option to manage and report on the XRY licenses or other MSAB extraction platform by location using the “Sites” feature. For example, SC DOC may wish to group the XRY Licenses by Facilities and be able to quickly run usage and management reports on the different facilities across the state. In XEC Director, the Administrator will simply create those Facilities (Columbia, Greenwood, Bishopville, Ridgeville, etc.) and then run a report on the Facility and its statistics. We could also set it up so you would have the option to run reports based on types of Facilities (Level 1-A, 1-B, L2, L3).

XEC Director can also manage the mobile enterprise by location in addition to permission groups.

XEC Director system ensures the successful upload of extraction files by leveraging Microsoft Background Intelligence Transfer Service (BITS). In the event that an extraction upload fails or is cut off part of the way through transfer, BITS will automatically complete the upload when connectivity is reestablished. This process will give SC DOC the confidence that all extractions are successful uploaded to the proper location. BITS is the same service used by Microsoft to push updates.

XEC Director can create customized workflow specific to SC DOC’s needs. Some examples of fields that customers request be included in their workflow and then later reported on may include:

Case type – can include SC DOC terminology and codes.

Device owner – witness, suspect, victim, etc.

Gang affiliation – could be included in a drop down or free text in the workflow.

Remote enterprise management.

Centralized license and software version management.

Centralized logging of all user activities.

Forensic log & audit trail.

Centrally push out completely configurable workflow for the field.

Design multiple dynamic workflows for different offices, use cases, and proficiency levels, and include SC DOC’s terminology, logos, and colors.

Create and manage groups, users & permissions.

Automatic routing of extractions to storage locations.

Remote assistance.

XEC Director offers the ability to gather management and usage statistics in a convenient and secure manner. Information such as:

Current client status, volume of extractions performed, software version and configuration updates and can also provide management information reports.

Make, model, and number of devices including loose media.

Number of extractions performed including extraction type Log of all user activity – easily run reports based on Action Type such as Login, Extract, Upload, etc.

Failed extractions vs. successful extractions.

Most common devices – tailor your training to address the most relevant devices.

Most common apps, to tailor your training.

Timeline of usage across the day, week, month to identify busy times.

Number of logical extractions vs. number of physical extractions.

Reports may be generated by user, permission group, location, machine, region, or globally.

WORLD CLASS TRAINING

MSAB is the only entity authorized to issue Certification for training on MSAB’s Ecosystem platforms.

MSAB trainers are full-time employees, not contracted trainers.

Training Certificates are serialized and controlled ensuring authenticity of certification via MSAB-approved courses and MSAB trainers.

Becoming a certified XRY examiner allows your users to present extracted evidence from mobile devices in court without question and gives them the proper knowledge to testify and explain their extraction methods.

MSAB offers a certified Train-the-Trainer curriculum to enable SC DOC to train and certify their trainees. Train the Trainer program allows the agency to purchase their own certificates and curriculum to teach, and reduces the cost of training significantly, if training more than 36 people over the course or 1-3 years.

Train the Trainer includes access to the latest versions of training materials Annual Train the Trainer renewal classes available to keep your Trainers up to date on the latest capabilities.

CUSTOMER SUPPORT

Should you have concerns with this intent to award MSAB, Incorporated in that you can provide all offered within the MSAB Mobile Forensic Ecosystem to include the “Salient Factors” that have been highlighted please send your responses via e-mail to SC Department of Corrections as directed below.

You must also provide documentation that you are authorized to perform all aspects of the content required.

RESPONSE PERIOD ENDS AND MUST BE SUBMITTED BY (Opening Date/Time): 01/05/2021 @ 10:00:00a.m.

The Award becomes effective after opening / date and time if no responses are received purchasing@doc.sc.gov - subject line SOLE SOURCE MSAB SC Department of Corrections -Attn: Annie Marsh – Sole Source Purchasing Department -4420 Broad River Road -Columbia, SC 29210

This notice will be posted in the South Carolina Business Opportunities (SCBO) for at least (10) business days as required by SC Code 11-35-1560.

PROTESTS:

If you are aggrieved in connection with the intended award or award of the contract, you may be entitled to protest, but only as provided in Section 11-35-4210. To protest an award, you must (i) submit notice of your intent to protest within (5) business days of the date this notice is posted, and (ii) submit your actual protest within fifteen days of the date this notice is posted. Days are calculated as provided in Section 11-35-310(13). Both protests and notices of intent to protest must be in writing and must be received by the appropriate Chief Procurement Officer within the time provided. The grounds of the protest and the relief requested must be set forth with enough particularity to give notice of the issues to be decided. Any protest or notice of intent to protest must be addressed to the Chief Procurement Officer and submitted in writing.

Chief Procurement Officer -Materials Management Office 1201 Main Street, Suite 600 -Columbia, SC 29201 Facsimile: 803-737-0639 E-mail: protest-mmo@mmo.state.sc.us

All (3) pages of this Intent to Award Sole Source must be submitted with all required information entered on the front (2) pages. You must also provide documentation that you are authorized to perform all aspects of the content required.