RFI 01302025 Data Extraction Software.pdf

FEDERAL BUREAU OF INVESTIGATION

FINANCE AND FACILITIES DIVISION | PROCUREMENT SECTION

REQUEST FOR INFORMATION (RFI) TEMPLATE

REQUEST FOR INFORMATION (RFI 01302025)

Data Extraction Software

DISCLAIMER:

THIS NOTICE IS FOR INFORMATIONAL PURPOSES ONLY. THIS IS NOT A REQUEST FOR

PROPOSAL OR QUOTE. IT DOES NOT CONSTITUTE A SOLICITATION AND SHALL NOT

BE CONSTRUED AS A COMMITMENT BY THE GOVERNMENT. RESPONSES IN ANY

FORM ARE NOT OFFERS AND THE GOVERNMENT IS UNDER NO OBLIGATION TO

AWARD A CONTRACT AS A RESULT OF THIS ANNOUNCEMENT. NO FUNDS ARE

AVAILABLE TO PAY FOR PREPARATION OF RESPONSES TO THIS ANNOUNCEMENT.

ANY INFORMATION SUBMITTED BY RESPONDENTS TO THIS TECHNICAL

DESCRIPTION IS STRICTLY VOLUNTARY.

INTRODUCTION

The United States Department of Justice (DOJ), Federal Bureau of Investigation (FBI), Information

Technology Management Section on behalf of the Digital Evidence Field Operations (DEFO) Unit is requesting information for data extraction and unlocks of Android and Apple mobile devices.

BACKGROUND

The FBI intends to identify available software solutions for operational use providing the FBI with the ability to perform data extraction. These collections shall include data extraction and unlocks of

Android and Apple mobile devices. The section below shall identify and define the capabilities of the requested software.

CAPABILITIES

Generic Forensics:

• Data Acquisition: Forensic imaging or the capture of data that preserves its integrity

(Hashing) of file systems (FAT, NTFS, EXT, XFS, Brfrs, JFS, ReiserFS, ZFS, Xiafs,UFS, HFS+, APFS) and live data.

• File System Analysis: Ability to examine the structure that organizes the files and folders of a storage device (FAT, NTFS, EXT, XFS, Brfrs, JFS, ReiserFS, ZFS, Xiafs,UFS, HFS+, APFS). Ability to recover deleted items and other File System artifacts.

• Metadata Analysis: Timestamps, file names, and attributes, Exif Data, which can reveal information about the creation and modification of the file.

• Text Indexing and Searching:

• Data Carving: Reassemble files from raw data when no file system metadata is available (file signatures, etc.).

• Log Analysis: Examining operating system logs and application logs to identify user activities, login events, and system events.

• Database Parsing: Internet Browsers and 3rd party APPS contain databases which contain artifacts related to history, messaging, location, and other user activity.

• Operating System Analysis (iOS, Android, MacOS, Linux, Windows): Recycle Bin, Shellbag, System Resource Usage Monitor, Jumplists, LNK files, Prefetch files, Windows Registry, Windows Shadow Copy, Mac Snapshots, Time Machine

Backups, USB connected devices, OS Log Analysis, User Info, etc.

• Physical media write protection via hardware and software solutions:

• RAM capture capabilities:

• Encryption Support and Analysis: Bitlocker, FileVault, LUKS, Veracrypt. Etc.

• Network analysis and fingerprinting:

• Capability to rebuild RAID arrays:

• Provide a live and bootable software: Supporting chipsets of intel, T2, and M1-4 chip architectures.

Mobile Capabilities:

• Capability to unlock mobile devices

• Full File System extraction of Android and iOS devices

• Capability to extract data from devices in After First Unlock (AFU) and Before First

Unlock (BFU) states

• Keystore and Keychain credential decryption

• Run offline, without an Internet connection

• Extractions can be parsed with non-proprietary COTS tools

CONTRACTOR QUALIFICATIONS

This RFI is open to manufacturers of software and platforms related to the categories described in the

BACKGROUND and CONTEMPLATED REQUIREMENT. The FBI prioritizes Commercial Off the Shelf (COTS) products that meet the capabilities above. This RFI is for market research only to request input from potential providers of platforms/software with the stated requirements.

The Government would like to know which firms can provide products and services for this contemplated requirement by identifying themselves and responding to this RFI. The Government requests the following information:

1. Company name and business size.

2. Provide evidence to show that your company can provide the requested products and/or required resources (i.e. technical ability, personnel, and experience). Information provided shall be succinct and related to the requested information in this RFI. All submissions shall be unclassified. Submissions shall be no longer that 15 pages in length.

3. Provide licensing/subscription models with pricing structure associated with your response, to include estimated cost of these structures for government assessment of budget impacts.

4. Any other assumptions, comments, concerns, and/or questions relating to the contemplated services.

5.

CONTEMPLATED REQUIREMENT

The DOJ, FBI, DEFO is issuing this RFI to:

• Gather industry information on the enclosed requirements.

• Gather pricing and cost information for software and licensing.

• Request information on any improvements that the FBI should consider when looking to achieve capabilities that meet requirements.

• Request information on potential barriers to obtaining solutions that meet objectives needed to accomplish stated requirements.

WHAT SHOULD BE INCLUDED IN YOUR RESPONSE

1. All interested parties shall submit capability packages in response to this notice.

2. Do submit succinct, thoughtful responses to the requirements/questions listed in this RFI.

3. Do submit comments that address the FBI's requirements, assumptions, conditions or contemplated approaches to this future acquisition.

4. Do submit information and suggestions that may encourage new, different, or innovative approaches that would result in products, solutions, and direct savings to the FBI.

5. Do submit any possible GWAC the product is available on and if the vendor has any authorized resellers.

WHAT SHOULD NOT BE INCLUDED IN YOUR RESPONSE

1. Do not submit proposals or offers.

2. Do not submit past performance information or general descriptions of corporate experience.

3. Do not submit requests to be considered for award or to be notified of a future solicitation.

4. Do not submit requests to be added to a mailing list or distribution list.

5. Do not submit questions or comments not related to this RFI.

6. Do not respond via telephone.

RFI SUBMITTAL INSTRUCTIONS:

All submissions shall be submitted electronically in Microsoft Word/Excel/PowerPoint or PDF format. All information should be UNCLASSIFIED material only. Submissions shall not exceed twenty (20) one-sided 8 ½ x 11 pages. The pages shall have one inch margins and font size must be at least 12 point font.

All questions must be sent via E-mail no later than March 26th and all questions will receive an answer by March 31st. All submissions should be e-mailed no later than 3:00 PM, April, 4th 2025 to

Contracting Specialists, Tyler Cutright at tbcutrigh@fbi.gov and Meredith Mcie at mkmcie@fbi.gov

E-mail subject shall be labeled “RFI-Data Extraction Software”.

The cost of responding to the RFI shall be exclusively borne by the organization submitting the information. No costs will be reimbursed by the government. The FBI makes no implied or in fact contract by issuing this RFI.

All clarifications, questions, and responses must be made via email. All questions regarding this RFI shall be in writing. No phone calls will be accepted. Phone messages will not be returned.

DISCLAIMER and RESPONSES

THERE IS NO COMMITMENT BY THE GOVERNMENT TO ISSUE A SOLICITATION AS A

RESULT OF THIS RFI. THIS IS BEING ISSUED SOLEY FOR INFORMATIONAL AND

PLANNING PURPOSES AND DOES NOT CONSTITUTE A SOLICTIATION. IN

ACCORDANCE WITH FAR 15.201(e), RESPONSES TO THIS NOTICE ARE NOT OFFERS

AND CANNOT BE ACCEPTED BY THE GOVERNMENT TO FORM A BINDING CONTRACT.

THIS IS NOT A REQUEST FOR PROPOSAL OR QUOTE. IT DOES NOT CONSTITUTE A

SOLICITATION AND SHALL NOT BE CONSTRUED AS A COMMITMENT BY THE

GOVERNMENT. RESPONSES IN ANY FORM ARE NOT OFFERS AND THE GOVERNMENT

IS UNDER NO OBLIGATION TO AWARD A CONTRACT AS A RESULT OF THIS

ANNOUNCEMENT. NO FUNDS ARE AVAILABLE TO PAY FOR PREPARATION OF

RESPONSES TO THIS ANNOUNCEMENT. ANY INFORMATION SUBMITTED BY

RESPONDENTS TO THIS TECHNICAL DESCRIPTION IS STRICTLY VOLUNTARY.

mailto:tbcutrigh@fbi.gov

Attachment AS - Request for Information (RFI) Template

Version 1.2 Page 6