For corporate investigations

Practice the investigation before it is yours.

Corporate investigators can train on Operation Glass Harbor — a business email compromise that runs through identities, social accounts, infrastructure, and crypto-style transactions — without touching production mail, logs, or real criminal infrastructure.

Capabilities

  • Business email compromise

    Follow a fraudulent payment thread across mail, identities, and infrastructure.

  • Fraud

    Separate the transaction story from the identity story.

  • Insider matters

    Practice correlating access, communications, and activity with care.

  • Financial tracing

    Read invoices, payments, and crypto-style records as part of the file.

  • Investigative reporting

    Write findings counsel, audit, or leadership can rely on.

Method

How Cybervestigate Works

Five stages, from the first briefing to the debrief against ground truth.

  1. 1

    Receive the case

    The learner receives an allegation, intelligence requirement, incident report, victim complaint, or briefing.

  2. 2

    Investigate

    They search Cybervestigate's simulated internet, collect evidence, interrogate records, correlate identities, examine artifacts, and request information.

  3. 3

    Analyze

    Build timelines, link entities, document hypotheses, evaluate sources, and identify gaps.

  4. 4

    Report

    Write findings and assessments supported by evidence.

  5. 5

    Debrief

    Compare decisions with the scenario ground truth and receive feedback.

Begin with the case.

Operation Glass Harbor is the investigation. The debrief comes after the work.

Start Investigating Train Your Team