Enterprise Automated Digital Forensics & Incident Response (DFIR) - 26/Pro-0024-S

Morgan State University is seeking a contractor to provide an enterprise-wide, automated digital forensics and incident response (DFIR) capability. The solution should integrate with existing security orchestration to provide "speed-to-evidence," allowing the security team to capture volatile memory and disk artifacts across the network in minutes rather than days. The contractor will be responsible for designing a system capable of performing remote, automated acquisition of volatile and non-volatile data from Windows, macOS, and Linux endpoints, configuring the solution to automatically initiate forensic collection based on high-severity alerts, establishing a centralized, encrypted evidence repository, and deploying capabilities to automatically correlate artifacts into a unified timeline for rapid investigator review. • The contractor will provide deployment of forensic agents/collectors across the enterprise, integrated "Playbooks" for automated forensic triggering, documented Standard Operating Procedures (SOPs) for digital evidence handling, and quarterly forensic readiness assessment reports. • The contractor will provide a subscription or license-based model with implementation services. • The contractor will ensure the ability to collect a standard forensic artifact set from any endpoint in under 10 minutes, seamless integration with the existing SOC alert pipeline, and validation of "forensically sound" snapshots that pass industry-standard integrity checks.