SOWN0017418R0033.doc

Naval Surface Warfare Center Indian Head Explosive Ordnance Disposal Technology Division Expeditionary Exploitation UNIT ONE (NSWC IHEODTD, EXU-1)

Statement of Work (SOW) For

Advance Media Training 6 March 2018

STATEMENT OF WORK

Naval Surface Warfare Center Indian Head Explosive Ordnance Disposal Technology Division Expeditionary Exploitation UNIT ONE (NSWC IHEODTD, EXU-1) Advanced Media Training 1.0

SCOPE

Naval Surface Warfare Center Indian Head Explosive Ordnance Disposal Technology Division (NSWC IHEODTD) Expeditionary Exploitation UNIT ONE (EXU-1) has a unique mission that requires Non-standard Pre-deployment training currently not offered by traditional Navy EOD units.

This Statement of Work (SOW) defines training to be presented to NSWC IHEODTD EXU-1 personnel in Advanced Media Training.

As part of the EXU-1 Fleet Response Training Plan (FRTP) this advanced course of instruction (COI) is specifically designed to educate, train and prepare EXU-1 personnel in the collection, analysis, and exploitation of captured equipment, and media to generate actionable intelligence. This training will provide leaders at all echelons with intelligence about enemy forces, their plans and intentions, and their tactics, techniques and procedures (TTP) through the rapid and accurate extraction, exploitation, and analysis of acquired cell phones, computers and digital storage devices, video and audio tapes, and other media and materiel. This capability is a critical element of target exploitation, especially as it relates to actions on the objective during site exploitation performing triage analysis of a collected digital device, fundamental principles and best practices of device forensics and the analysis process and collect volatile data.

2.0

APPLICABLE DOCUMENTS

1) OPNAVNOTE 5450.

2) NAVSEANOTE 5450.134.

3) JROCM 128-08.

4) EXU-1 SORM – INST 3120.1.

5) EXU-1 TRAMAN – 3502.1B

3.0

REQUIREMENTS

1) The Contractor shall provide all instructors, labor, training aids necessary to instruct and train EXU-1 Personnel in the areas specified in this SOW.

2) The Contractor shall provide a maximum of two COI with classroom and practical instruction for a maximum of 10 participants per course. The training curriculum will be designed to support a ten day COI with maximum of 10 hours of instruction per training day. The Contractor shall provide both classroom and practical training with a focus on the following areas:

Properly capture digital evidence at a dynamic location and perform an analysis of a suspected device.

Capture passwords and live data.

Image digital devices using Windows and Linux based tools.

Use preview devices to view data collected.

Gather "low hanging fruit" for Intelligence.

Report collected Intelligence to respective chain of command.

Understand Mobile Device Forensics Fundamentals

Understand the cell phone analysis process

Understand the basics of Data Access/Acquisition from an Android phone

Familiarization with basic and open source tools for the analysis of Android based phones Android Reporting Tool

MapLink

Access/Acquire data from an android phone using various tools

Analyze/Interpret data acquired from an android phone using various tools

Understand the basics of Data Access/Acquisition from an Android phone

Properly teardown a cellphone

Python Tool Scripting Interface Replace key components on the cellphone using heat gun techniques

Report findings of the examination

Develop a streamlined process

3) The Government shall provide classrooms and all practical training areas/facilities capable of meeting all training objectives prescribed for this course.

4) A detailed Schedule of Events (SOE) shall be developed and approved by EXU-1 N7 Department 5 business day prior to beginning of this COI. Any changes to the SOE shall be provided to the Contract Buyer and EXU-1 N7 Department for approval.

5) The Contractor shall provide an After Action Report (AAR) to be delivered to the Contract Buyer and EXU-1 N7 Department within two weeks following completion of each course of instruction. Any changes to the course will be discussed between the Contracts Department, EXU-1 N7 Department and the Contractor as necessary.

3.1

PERIOD AND PLACE OF PERFORMANCE

The Contractor shall have a curriculum ready to deliver training for the anticipated dates and locations as follows:

Training Location

NSWC IHEODTD, EXU-1 (Stump Neck Annex, Indian Head, MD) Dates 14-25 May 2018

And

TBD Fall 2018 3.2

EVALUATIONS AND CERTIFICATIONS

1) The Contractor shall provide course feedback evaluation forms that allow participants to comment on the primary blocks of instruction and make recommendations for improvement this feedback will be provided in the After Action Report (AAR).

2) The Contractor shall deliver participant certificates upon completion of the course that state at a minimum the name and rank of each participant, hours of instruction, and course title and dates.

4.0

DEFINITIONS

1) CONTRACTOR. A supplier or vendor having a contract to provide specific supplies or service to the government. The term used in this contract refers to the prime.

2) CONTRACTING OFFICER. A person with authority to enter into, administer, and or terminate contracts, and make related determinations and findings on behalf of the government. Note: The only individual who can legally bind the government.

3) SUBCONTRACTOR. One that enters into a contract with a prime contractor. The Government does not have privity of contract with the subcontractor.

4) TRAINING AREA OR FACILITY. Classrooms and non-explosive/non- live fire buildings.