The Department of Homeland Security, Cybersecurity and Infrastructure Security Agency, Cybersecurity Division, Threat Hunting subdivision is seeking respondents that can provide Splunk Enterprise License or equivalent network analysis software tool to search, monitor, and analyze high volumes of machine generated data. The software has advanced searching capabilities, which allows analysts to quickly find, transform, and present data in ways that other tools cannot. Splunk also contains easy-to-use visualization tools for displaying the captured machine data in charts, graphs, and tables that can be used for dashboards and reporting. Additionally, Splunk is an integral part of CDI’s customized engagement kits. An engagement kit, also referred to as a customized “field kit” or “fly away kit”, is a collection of network taps, servers, and storage arrays, along with supplemental equipment used for hunt and incident response activities at a customer’s location. These kits are designed and built in-house and are based on CDI’s unique requirements for each to be provisioned and deployed into networks of disparate sizes, to be able to collect an array of data at various capture rates, and to be able to sanitize the customer information from the kits after each engagement.
