Case Files

A case is never finished, only defensible

Case files persist across modules. Facts move between confidence levels as evidence arrives, and old assumptions are re-audited when a new artifact contradicts them.

3 open filesSynthetic contentConfidence-graded

The case universe

Evidence arrives late, on purpose.

Each synthetic case holds thousands of artifacts and unfolds progressively. You rarely receive everything at once. That produces uncertainty; uncertainty produces judgment; judgment is what the Academy trains.

Cyber fraudRomance & social engineeringSynthetic identityDeepfake extortionFinancial fraudCoordinated influenceInsider riskDigital evidenceCriminal infrastructureAI-assisted fraudSupply-chain anomaliesRansomware investigationMalicious automationDisinformation networksCross-border scam networks
The Cartographer Challenge™ →

TRAINING / SYNTHETIC

The Lonely Investor

OPEN — Term II · Opened Week 13

A persona-led investment fraud maintained across three languages with model assistance. Everything in this file is fabricated for instruction.

Overall confidence

MODERATE

Open case file

TRAINING / SYNTHETIC

Mirror Market

OPEN — Term II · Opened Week 16

A fictional marketplace whose vendor accounts appear to be reflections of one another.

Overall confidence

LOW

Open case file

TRAINING / FICTIONAL ADVERSARY

EVE — Meta Case

RUNNING — Months 1–9 · Opened Orientation

Clues accumulate from orientation to capstone. Some contradict each other. Some were planted to test your discipline.

Overall confidence

INSUFFICIENT

Open case file

Required reading

Open PDF

The Hunt for 3ve — Google & White Ops

A real, published account of a coordinated takedown of a large ad-fraud operation. Read it before the network and finance modules: it shows how infrastructure mapping, traffic analysis, private-sector collaboration and legal process combine into a defensible case.

If the document does not display in your browser, use “Open PDF” above.