SOW.docx

FEDERAL BUREAU OF INVESTIGATION

FINANCE DIVISION | PROCUREMENT SECTION

STATEMENT OF WORK

Spyder Forensics LLC Unmanned Aerial Systems (UAS) Digital Forensics For the Laboratory Division

Statement of Work

26 JUNE 2021

FEDERAL BUREAU OF INVESTIGATION

STATEMENT OF WORK

1. Introduction Background The Laboratory Division, Terrorist Explosive Device Analytical Center (TEDAC), Technical Exploitation Unit (TExU) within the Federal Bureau of Investigation (FBI) conducts improvised explosive device technical examinations, to include unmanned aerial system (UAS) examinations which possess an IED fuzing system nexus. As FBI investigative interest in UAS becomes increasingly more common, and the technical aspects of digital forensics more complex, these factors create the need to provide training needs to meet mission requirements. In order to fulfill this mission, the TExU conducts a significant amount of training to its electronic engineer-forensic examiners, electronic technicians and supervisory Special Agents.

To meet TExU training requirements, a coordinated UAS digital forensics course should be comprised of the following:

· Extraction techniques

· Interpretation of data

· Advanced Analysis Techniques

· Report Writing

· Presentation of Evidence capable of acceptance in court

· Final Assessment/Check on Learning

In order to ensure this training is successful, it’s necessary to procure the services of a recognized UAS digital forensics expert/vendor; in this case Spyder Forensics LLC.

Scope The purpose of this Statement of Work is to contract with a recognized expert vendor which will provide training services in relation to UAS Digital Forensics. This is a contract to provide UAS Digital Forensics to the Federal Bureau of Investigation (FBI) Laboratory Division (LD).

Objectives To provide electronics engineer-forensic examiners and Supervisory Special Agents with the latest in UAS data extraction techniques, interprestation of data, advanced analysis techniques, report writing, presentation of evidence capable of acceptance in court, and administration of a final assessment.

Requirements/specifications The Government shall not exercise any supervision or control over contractor employees performing the services herein. Such contract service providers shall be accountable solely to Spyder Forensics LLC, who in turn is responsible to the Government.

Task Descriptions

· Extraction techniques

· Extraction of data from the aircraft

· Extraction of data from mobile \ tablet device

· Extraction of controller data

· Disassembling techniques

· Arguments for and against

· Advanced extractions using CFED device

· Using FTP to extract data

· Exploitation of communications ports

· Interpretation of data

· Techniques in using opensource and commercial forensic tools to review the evidence

· Interpretation of data contained on the UAV

· File System considerations

· Registered user information

· Aircraft details

· Flight log analysis techniques

· Interpretation of data from portable devices

· Default folder structures of the controlling app from an Android and iOS device

· Synchronized logs vs. local logs

· Error log analysis

· Media file examination (geolocations and dates & times)

· Workflows in combining offline files for further analysis

· Techniques in the interpretation additional data on other devices.

· Advanced Analysis Techniques

· Flight recorder “Black box”

· Advanced examination workflows

· Additional App and Controller considerations

· Linking hardware devices within the sUAS

· Simplification of data – graphical representation

· Mapping of flight paths

· Automated flight analysis

· PixHawk examinations

· Report Writing

· Presentation of Evidence capable of acceptance in court

· Discussion on courtroom preparation and presentation

· Overview of UAV report considerations

· Glossary of terms

· Report writing practical

· Final Assessment

· Student knowledge assessment.

Place of Performance The place of performance will be on the Redstone Arsenal, Alabama.

Hours of operation The training will be performed starting Monday July 26, 2021, ending on July 29, 2021. Daily hours will be from 8:00 a.m. to 5:00 p.m., with a one hour lunch break daily.

Deliverables The Contractor shall provide instruction in the above listed topics, and course coordination as outlined above.

Government Furnished Equipment or Information N/A Security Requirements

Access to the Federal Bureau of Investigation (FBI) Locations Performance under this contract may require access to FBI locations to provide some service, product, or perform some other official function of interest to the FBI. Requirements, as identified below, to include approval by the FBI's Security Division, must be satisfied prior to access. Contractors who will require escorted access, to include short-term, intermittent, or infrequent access, to an FBI facility must complete an "Access of Non-FBI Personnel to FBI Facilities, Background Data Information Form," (FD 816), a "Privacy Act of 1974 Acknowledgment Form" (FD 484) and two Fingerprint Cards (FD 258). Completed and accepted forms should be provided to the assigned Contracting Officer's Representative (COR), at least 10 business days prior to required access.

FBI-0010 Warrantless Search - Contract Security Requirements from Acquisition Security Unit (ASU) All cleared personnel accessing information within FBI controlled space are required to execute an FBI Form FD 1001 Consent for Warrantless Searches of Department of Justice (DOJ) Workplaces as a condition of working at FBI facilities. The FBI's Director implemented the Attorney General's policy subjecting employees to warrantless physical searches of their offices or immediate workplaces within DOJ premises when authorized by the Attorney General (AG) or the Deputy Attorney General (DAG) based upon a determination that information the Department deems credible indicates that the employee: 1) is, or may be, disclosing classified information in an unauthorized manner; 2) has incurred excessive indebtedness or has acquired a level of affluence that cannot be reasonably explained by other information; 3) had the capability and opportunity to disclose classified information that is believed to have been lost or compromised to a foreign power or an agent of a foreign power; or 4) has repeatedly or significantly mishandled or improperly stored classified information. The search may extend to the entire office or workplace and anything within it that might 15F06720P0000929 Page 11 of 14 hold classified information, including locked containers (such as briefcases) and electronic storage media (such as computer disk and handheld computers), whether owned by the government, by the employee, or by a third party. The search may be conducted by appropriate FBI personnel and/or law enforcement officers, on an announced or unannounced basis, during the workday or after hours. If discovered during a search, evidence of misconduct - whether related to storage or classified information, storage of sensitive but unclassified information, or a crime - will be collected and reported to appropriate authorities. Contractor personnel who will meet the above criteria will be required to sign Form FD 1001 Consent for Warrantless Searches of Department of Justice (DOJ) Workplaces (attached) upon award and forward the executed form(s) to the assigned Contracting Officer's Representative designated in Section G of the solicitation if this is a formal solicitation or listed below. All forms will be retained by the FBI during the period the individual is providing services and two years after that individual's departure before final disposition is taken.

FBI-0004 DOJ Residency Requirement - Contract Security Requirements from Acquisition Security Unit (ASU) DOJ Residency Requirement: All contractor personnel employed within the United States, both United States citizens and non-United States citizens, are required to meet the following residency requirements: For three of the five years immediately prior to applying for the specific contract position, the individual must have 1) resided in the United States; 2) worked for the United States overseas in a Federal or military capability; or 3) be a dependent of a Federal or military employee serving overseas. The requirement may be waived for short term contractor personnel (performing duties for a cumulative total of 14 days or less) if there is a critical need for their specialized and unique skills. These individuals must, however, be United States citizens or Permanent Resident Aliens.

DJAR-PGD-02-02B Non-U.S. Citizens Prohibited from Access to DOJ Information Technology (IT) Systems The Department of Justice (DOJ) will no longer permit the use of Non-U.S. citizens in the performance of this contract or commitment for any position that involves access to or development of any DOJ IT system. By signing the contract or commitment document, the contractor agrees to this restriction with respect to all new employees utilized directly to perform duties on the contract. Non-U.S. citizens currently employeed under this contract or commitment may continue performance unless otherwise directed by the Department of Justice. No new, replacement or additional Non-U.S. citizens may be added to the contract without the express approval of the Department of Justice. [In those instances where other non-IT requirements contained in the contract or commitment can be met by using Non-U.S. citizens, those requirements shall be clearly described.]. (End of Clause) Government Representatives Travel There is no travel under this contract

image1.jpeg image2.jpeg