For organizations
Train your team.
Choose the practice you are building. Each audience works the same fictional universe with different tasking.
-
For
Cybercrime investigators
Identify subjects, follow infrastructure, and assemble a case file from simulated evidence.
-
For
Threat intelligence
Follow simulated actors, infrastructure, and underground personas through to a finished assessment.
-
For
Intelligence analysts
Turn one fictional world into requirements, hypotheses, gaps, and a confidence call.
-
For
Law enforcement
Give investigators hours inside a simulated case: preservation, coordination, and a report a supervisor can review.
-
For
Corporate investigations
Work business email compromise, fraud, and financial tracing inside a simulated environment, off production systems.
-
For
Universities
Assign a simulated case, grade the report and the reasoning, and debrief against ground truth.
-
For
Government
Train investigators and analysts in a simulated range with no path to live criminal infrastructure.
Method
How Cybervestigate Works
Five stages, from the first briefing to the debrief against ground truth.
-
1
Receive the case
The learner receives an allegation, intelligence requirement, incident report, victim complaint, or briefing.
-
2
Investigate
They search Cybervestigate's simulated internet, collect evidence, interrogate records, correlate identities, examine artifacts, and request information.
-
3
Analyze
Build timelines, link entities, document hypotheses, evaluate sources, and identify gaps.
-
4
Report
Write findings and assessments supported by evidence.
-
5
Debrief
Compare decisions with the scenario ground truth and receive feedback.