Framework Agreement concerning acquisition of forensic software for computers, mobiles, cloud, vehicles and analysis of cryptocurrency transactions

Description du marché

Digital forensics is a branch of forensic science that focuses on identifying, acquiring, processing, analysing and reporting on data stored on electronic devices, e.g. mobiles and computers. The majority of police investigations include analysis of digital evidence due to the societal digitalisation and subsequent increase in electronic devices. Sound digital forensics tools are crucial to law enforcement organisations and ensure that the Danish Police can not only continuously conduct but also strengthen the investigation of digital evidence. For this purpose the contracting authority intends to enter into a framework agreement concerning delivery of a variety of software to perform digital forensic examinations including services (e.g. training in the use of the forensic software) and any subsequent amendments hereof within the scope of the agreement. The forensic tools perform tasks related to digital forensic examinations within one or more of the following categories: I. Computer forensics II. Mobile forensics III. Cloud forensics IV. Vehicle forensics V. Analysis of cryptocurrency transactions The software for categories I-IV include the possibility of conducting one or more of the following processes: a) Data acquisition A systematic and carefully controlled process aimed at capturing and preserving digital evidence in a manner that maintains its integrity and authenticity without altering the original evidence. b) Data processing Transforms raw data into useful information to ensure a forensically sound output as well as examining file systems to recover deleted files, analyse metadata, and construct timelines. c) Data analysis Enables the investigator to search and filter the acquired, processed data in order to analyse findings (e.g. identify source). d) Data presentation Enables presentation of information and data in a graphical user interface in order to provide an accessible way to see and understand trends, outliers, and patterns in data. e) Data export Enables export of data for local review by the examiner including the possibility of converting the data into a specific format that can be easily exported. The software for category V include the possibility of conducting one or more of the following processes: a) Analysis of cryptocurrency transactions Linking cryptocurrency transactions in the relevant blockchain to real entities. Enables filtering on different parameters (e.g. entities or transactions) as well as currency and cluster identification. b) Data presentation Enables presentation of information and data in a graphical user interface in order to provide an accessible way to see and understand trends, outliers, and patterns in data. c) Data export Enables export of data (both graphics and raw transactions data e.g. .cvs files) for local review by the examiner. d) Identification of services Enables identification of services such as exchanges, darknet markets, mixers, and bridges. e) Monitoring Preforming real-time, on-chain monitoring of suspicious entities in order to identify fraudulent entities and mixer services. The framework agreement as a whole will be awarded to one tenderer that will deliver a variety of digital forensic software to the Danish police and thereby be gaining considerable knowledge of the Danish police's digital forensics capabilities and needs. As part of fulfilling the framework agreement the supplier will be obliged to assist the contracting authority in the strategic considerations regarding the Danish police's development of the portfolio of digital forensic software. The contracting authority is not obliged to buy any minimum quantity of the products comprised by the framework agreement. The framework agreement is not exclusive, thus, it does not limit the contracting authority’s right to purchase similar software or services from other suppliers.

Pouvoir adjudicateur