Academy / Curriculum
Thirty modules. One continuing case.
Each module ends in a mission, a briefing or a debrief. Nothing is assessed by multiple choice alone — you are assessed on what you can defend.
How every module is structured
What you learn
The concept, stated plainly.
What you practice
A synthetic case, not a quiz.
Which HUNTER system
The instrument you work inside.
What you must prove
The defensible output.
What you leave with
A capability an employer can test.
Practicums
Assessed by what you can defend
Network Practicum
ACTIVECARTOGRAPH™
- Scenario
- A partially obscured synthetic criminal network.
- You must prove
- Identify hidden infrastructure reuse and name the bridging entity.
- You leave with
- Ability to resolve entities across identifiers and defend the link.
Evidence Practicum
ACTIVECHAIN™
- Scenario
- Conflicting artifacts with incomplete custody.
- You must prove
- Build a chain of evidence that survives a hostile reading.
- You leave with
- Court-oriented preservation and transformation discipline.
Deepfake / Origin Practicum
ACTIVEORIGIN™
- Scenario
- Media of contested authenticity across several devices.
- You must prove
- Separate visual suspicion from evidentiary proof.
- You leave with
- Provenance assessment language that does not overstate.
Hypothesis Practicum
ACTIVEREASON™
- Scenario
- A plausible but misleading initial theory.
- You must prove
- Falsify the first theory before reaching the correct explanation.
- You leave with
- Structured hypothesis testing and confidence calibration.
Adversarial AI Practicum
ACTIVESIGNAL™
- Scenario
- Coordinated synthetic identities and AI-generated influence behavior.
- You must prove
- Distinguish coordination from coincidence at scale.
- You leave with
- Detection of machine-manufactured consensus.
Fraud Network Practicum
ACTIVEPATTERN™
- Scenario
- Financial activity, companies, devices and communications across borders.
- You must prove
- Map related entities and produce a referable package.
- You leave with
- Financial-crime intelligence tradecraft.
TERM I
Becoming the Hunter
Months 1–3
Learn to see a criminal ecosystem, think like an analyst, and treat every clue as something you will one day have to defend.
Cybercrime Ecosystem
01Weeks 1–2
Roles, marketplaces, service economies and the industrial structure behind fraud.
Intelligence Thinking
02Weeks 2–4
Requirements, collection, analysis, confidence language and analytic honesty.
OSINT & Digital Breadcrumbs
03Weeks 4–6
Lawful discovery, selector discipline, geolocation and chronolocation reasoning.
Social Engineering & Human Vulnerability
04Weeks 6–7
Pretexts, urgency, authority, isolation and the psychology of the approach.
Evidence Foundations
05Weeks 7–9
Provenance, hashing, capture discipline and chain of custody from the first minute.
Network Mind
06Weeks 9–10
Entities, edges, clusters and why the system matters more than the individual.
Introduction to AI Investigation
07Weeks 10–11
Using agents for triage and pattern work while keeping human decision authority.
Ethics, Authority & Rule of Law
08Weeks 11–12
What discovery permits, what it never permits, and who may act.
TERM II
AI Against AI
Months 4–6
The contest becomes human + AI versus malicious human + AI. Learn both sides of the machine.
The AI Criminal
01Weeks 13–14
Automated targeting, localized scripts, synthetic media and machine-speed fraud.
The AI Hunter
02Weeks 14–15
Agent orchestration, tasking, verification loops and provenance of AI output.
Synthetic Identity
03Weeks 15–17
Manufactured personas, reuse artifacts and identity-cluster analysis.
Deepfakes & Authenticity
04Weeks 17–18
Voice, video and document authenticity reasoning without over-claiming.
Behavioral Signals
05Weeks 18–19
Tempo, language, error patterns and operator fingerprints.
Crypto & Financial Intelligence
06Weeks 19–21
Flow tracing, cash-out behavior, mule structures and typologies.
Network Intelligence
07Weeks 21–22
Graph analysis, centrality, bridges and infrastructure reuse.
Agentic Adversaries
08Weeks 22–23
Autonomous adversary behavior and how to distinguish it from a human operator.
AI Safety
09Week 23
Failure modes, hallucinated matches, model bias and false attribution risk.
Human-in-the-Loop Intelligence
10Week 24
Where the human must sign, and why that never delegates to a model.
TERM III
The Disruption Lab
Months 7–9
Convert fragmented clues into a defensible package an authorized institution can act upon.
Advanced Case Development
01Weeks 25–26
From tip to continuing case with evolving leads and dead ends.
Digital Evidence
02Weeks 26–27
Reproducibility, minimization and court-oriented handling.
Investigative Interviewing
03Weeks 27–28
Rapport, elicitation, deception recognition and source assessment.
Attribution
04Weeks 28–29
Confidence thresholds, alternative hypotheses and the cost of being wrong.
International Cybercrime
05Week 29
Jurisdiction, mutual legal assistance and cross-border friction.
Scam Center Ecosystems
06Weeks 30–31
Trafficking, coercion, victim-centered method and system mapping.
Law-Enforcement Referrals
07Week 31
Referral packages that a case agent can actually use.
Private-Sector Collaboration
08Week 32
Platforms, banks, telecoms, registrars and cybersecurity firms.
Authorized Cyber Operations
09Weeks 33–34
Authorization chains, written approval, stop conditions and reporting.
Collateral Effects & Escalation
10Week 34
Second-order effects, innocent infrastructure and escalation discipline.
Operational Planning
11Week 35
Options, risk assessment and post-disruption monitoring.
The Hunt for Eve
12Week 36
The 30-day capstone before the Cyber Grand Jury.