Investigate the Digital World.

Learn to investigate cybercrime by actually investigating it.

Cybervestigate is an immersive cybercrime investigation and intelligence training platform where investigators work realistic cases across simulated surface web, dark web, social media, communications, infrastructure, financial records, and digital evidence.

Start Investigating Train Your Team

The work

This isn't another CTF.

The Range is built for performance-based learning: simulated on-the-job experience, assessment, teamwork, and feedback.

  1. Investigate identities.
  2. Follow infrastructure.
  3. Analyze communications.
  4. Trace digital evidence.
  5. Assess competing explanations.
  6. Write defensible conclusions.

The Range

An Internet Built for Investigation

Eight simulated environments. Each one is a place to search, correlate, and collect a record an investigator can cite.

Surface Web

ExamplesBusinesses, blogs, news, profiles, directories

Social Media

ExamplesAccounts, posts, DMs, images, connections

Underground Web

ExamplesForums, marketplaces, leak sites, actor pages

Communications

ExamplesEmail, chat, private messages

Infrastructure

ExamplesDNS, WHOIS-style records, certificates, hosting

Financial

ExamplesTransactions, invoices, crypto-style records

Digital Evidence

ExamplesLogs, browser history, mobile and disk artifacts

Intelligence

ExamplesReports, bulletins, tips, conflicting assessments

These are simulated underground and dark-web environments, together with the surface web, social media, communications, infrastructure, financial records, and digital evidence around them. Cybervestigate does not provide access to real criminal infrastructure.

Method

How Cybervestigate Works

Five stages, from the first briefing to the debrief against ground truth.

  1. 1

    Receive the case

    The learner receives an allegation, intelligence requirement, incident report, victim complaint, or briefing.

  2. 2

    Investigate

    They search Cybervestigate's simulated internet, collect evidence, interrogate records, correlate identities, examine artifacts, and request information.

  3. 3

    Analyze

    Build timelines, link entities, document hypotheses, evaluate sources, and identify gaps.

  4. 4

    Report

    Write findings and assessments supported by evidence.

  5. 5

    Debrief

    Compare decisions with the scenario ground truth and receive feedback.

Audiences

Who it's for

The same fictional universe, tasked differently for the people who train on it.