Army CID Seeks Advanced Software to Monitor Dark Web and Encrypted Messaging

The Department of the Army Criminal Investigation Division (CID) is seeking cutting-edge commercial software tools to enhance its ability to monitor and track adversaries using dark web platforms and encrypted messaging services. This initiative aims to shift from a reactive stance to a proactive approach in identifying threats against U.S. military personnel, installations, and infrastructure.

According to an RFI released this week, modern adversaries have increasingly moved their operations away from mainstream online spaces towards more secure and decentralized digital networks like the dark web and encrypted messaging apps such as Signal, Telegram, and Discord. These platforms enable potential attackers to coordinate activities, radicalize individuals, and plan hostile actions without detection by traditional monitoring methods.

CID officials are particularly interested in acquiring a cloud-hosted commercial threat intelligence platform that leverages advanced technologies including automated behavioral analytics, machine learning, and artificial intelligence. This new system would be capable of bypassing the limitations of keyword-based open-source intelligence (OSINT) tools currently in use. The goal is to detect early signs of mobilization towards violence against military targets through sophisticated analysis.

The RFI highlights several key capabilities that CID seeks in potential software solutions. These include natural language processing and computer vision for automated translation and symbol recognition, which would help interpret the complex vernacular used by adversaries. Additionally, officials are looking for tools to correlate user accounts across various digital platforms into unified subject profiles, aiding in comprehensive threat assessment.

To ensure effective evidence collection and preservation, CID also requires technologies that can automatically gather volatile or deleted content before it disappears. This capability is crucial for maintaining a robust record of potential threats. Furthermore, the division envisions using virtual workspaces during undercover operations to conceal investigators' digital identities and origins from sophisticated adversaries.

Industry vendors are invited to provide detailed information on how their solutions address coded communications, track coordinated threat actors across fragmented networks, and integrate human analysts into alert validation processes. Responses must also demonstrate how their systems can protect investigator metadata and location data while capturing ephemeral data as evidence during active probes.

The deadline for vendor submissions is December 9th, marking the beginning of a significant shift in CID's approach to cybersecurity and intelligence gathering against emerging threats on encrypted and dark web platforms.