CELLHAWK_SOL_ATTACH_0001_SOW_28MAY2024.pdf

Statement of Work (SOW) for CellHawk Software

28 May 2024

Headquarters Department of the Army

Criminal Investigation Division (DACID)

1.0 BACKGROUND:

The DACID requires LeadsOnline CellHawk Cell Detail Record Mapping Software and training. This will enable Criminal Investigators, Intelligence Analysts, and Digital Forensic Examiners to analyze data gathered from cell phone provider search warrant returns. These licenses are mission critical for the timely analysis of data collected from cell phone providers, which may contain data critical for criminal investigations.

2.0 SCOPE:

The contractor shall provide:

- CellHawk software subscriptions for ninety (90) users.

- One Training Session (for 10 users) per contract period, presented on a virtual platform (e.g. Zoom, Microsoft Teams), at a time/date to be determined within the base year (first 12 months).

2.1 DESCRIPTION OF SUPPLIES:

This is a renewal requirement for ninety (90) CellHawk software subscriptions.

Additionally, the procurement is for One Training Session (for 10 users) per contract period.

2.2 PERIOD OF PERFORMANCE:

The period of performance is as follows:

Base Period: 21 June 2024 – 14 June 2025 Option Year 1: 15 June 2025 - 14 June 2026 Option Year 2: 15 June 2026 - 14 June 2027 Option Year 3: 15 June 2027 - 14 June 2028 Option Year 4: 15 June 2028 - 14 June 2029

2.3 CONTRACT TYPE:

The government anticipates award of a firm-fixed price type contract.

3.0 TECHNICAL REQUIREMENTS:

During the base period, the contractor shall provide One Training Session (for 10 users) per Contract period by a virtual platform. Subscription licenses for CellHawk shall contain the following minimum technical requirements:

- Ability to map cell site locations from most call detail record formats. The software needs to be able to handle the different formats provided by the carriers.

- Ability to ingest and analyze call detail records from all major cell service providers including Verizon, T-Mobile, AT&T, Sprint, Cricket, Metro, and U.S. Cellular.

- For Code Division Multiple Access (CDMA) cell phone carriers like Verizon, it must provide the distance of the device based on Per Call Measurement Data (PCMD) PCMD can be provided by some carriers and it measures the time it takes a signal to travel between device and tower.

- The ability to animate calls from multiple phones concurrently.

- The ability to filter on multiple parameters based on date, time, direction, day of the week, time of the day, including and excluding a specific number.

- The ability to initiate a reverse phone-look-up on any outside number.

- Ability to plot all cell sites within a geographic area, not just the ones used by a cell phone.

- Load and analyze geographical data from electronic service providers (e.g. Google), GPS, and mobile phone extractions. Geographical data can also be extracted from other sources. The software needs to be able to analyze the data from multiple types of source data.

- Plot cell device geographical movement over time. The software needs to show a timeline of movement to help attribute certain data points to human activity.

- Set geographic boundaries of interest. Within the program, the user requires the ability to set geographic parameters (e.g. crime scene) and observe whether the geographic data points coincide with the location.

- Show cell tower location and sector information that comes directly from uploaded call detail records (not using crowd sourced tower information). Each call data record packet includes information about the cell tower location and the sectors that the antennae cover.

The software must be able to ingest and translate this data to map accurate tower locations vs. using information crowd sourced by other organizations.

- Conduct link, frequency, and timeline analysis between data sets. When multiple call detail records and data from other sources are loaded, the software needs to be able to combine and analyze the data to identify links between them.

- Maps live ping alerts for cell phone ping requests. The software must be able to receive and map these alerts in real-time.

- Reverse phone look-ups. In the course of analyze call records, the software must be able to provide general information about phone numbers that are encountered (e.g. general location, provider, public records) which can help determine links between devices.

- Provides legal templates for preservation letters and search warrants. The software must keep up-to-date legal templates to streamline the drafting of preservation letters and warrants in order to obtain the data analyzed by the tool.

- Generate standardized reports in multiple formats for courtroom presentation. . The software must be able to export the findings into these formats; pdf, Excel, HTML.

- Set baseline maps of different types and views (e.g. terrain, satellite, street, aviation). to provide an accurate visual representation of the data. Ability to forensically analyze data without making changes to originals. All forensic software in CID’s inventory must preserve the integrity of the data, and ensure there are no writes or deletions so that agents can testify to its authenticity.

3.1 INSPECTION/ACCEPTANCE TERMS: Inspection and Acceptance shall be at destination.

POC:

Name: James W. Mahon Position Title: Digital Forensics Program Manager Phone: (571) 639-9187

Email: James.w.mahon4.civ@army.mil

3.2 DELIVERY

The contractor shall electronically deliver the Cellhawk subscriptions and training vouchers to:

james.w.mahon4.civ@army.mil Phone No. (571) 639-9187

The Contractor shall remotely support the Government location at the DACID, Quantico, VA and other DACID directed facilities.

3.3 HOURS OF OPERATION

0800-1600hrs (EST) Monday – Friday

3.4 RECOGNIZED HOLIDAYS

New Year’s Day Martin Luther King Jr.’s Birthday President’s Day Memorial Day Juneteenth Independence Day Independence Day Labor Day Columbus Day Veteran’s Day Thanksgiving Day Christmas Day