RFI-Advanced Forensic Capabilities for Identifying Non-Traditional Insider Data Exfiltration Methods

The Federal Bureau of Investigation (FBI) is seeking information on advanced forensic capabilities for identifying non-traditional insider data exfiltration methods. The FBI's Insider Threat Office is looking for mature, commercially available technologies that can help forensically trace and attribute non-traditional methods of exfiltrating sensitive or classified materials from FBI managed workstations. Some examples of non-traditional techniques include physical screen photography, covert screen captures, or other low-tech/high-stealth physical/digital methods that bypass conventional network-based data-loss prevention controls. • The solution must maintain document integrity for discovery purposes and be applicable to common file types such as PDF and Microsoft Office files. • The solution must incorporate logging, timestamping, and attribution capabilities for detection events and evidence artifacts, aligned with federal standards. • The company must possess a Top Secret (TS) facility clearance with eligibility to receive access to Sensitive Compartmented Information (SCI). • The FBI is seeking information on which firms can provide the required capabilities and is interested in solutions that are demonstrable and capable of supporting enterprise-wide deployment.