The Cyberwarfare
AcademyIn association with the National Security Agency

Case Files / TRAINING / FICTIONAL ADVERSARY

EVE — Meta Case

Clues accumulate from orientation to capstone. Some contradict each other. Some were planted to test your discipline.

RUNNING — Months 1–9Opened OrientationConfidence INSUFFICIENT

People

  • EVE

    Unresolved — human, group, persona, agent network or hybrid

    Insufficient

Accounts & infrastructure

  • · unresolved
  • · unresolved

Finance

  • · unresolved

Follow the money.

Timeline

  1. Month 1

    First clue delivered during orientation.

  2. Month 4

    Clue set contradicts the Month 1 assumption.

  3. Month 9

    Cyber Grand Jury / Joint Operations Board.

Hypothesis board

  • Eve is a single human coordinator.

    ALIVE

    Explains 31% of available evidence

  • Eve is an agent network with human sponsors.

    ALIVE

    Explains 34% of available evidence

  • Eve is a brand used by unrelated actors.

    ALIVE

    Explains 29% of available evidence

ARGUS requires that at least two hypotheses remain alive until the evidence closes them.

Network

Synthetic graph · Academy range

Entity inspector

Select an entity to inspect its relationships and edge confidence. Dashed edges are low confidence — they are leads, not findings.

CARTOGRAPHER note: two clusters now share one registrar artifact. Bridge confidence is moderate and a human must sign the assessment.

Legal

Fictional. No real-world attribution may be attempted or implied.

Team

HUNTER CELL 04-B — Lead Investigator (rotating): Jordan Ellis. Roles rotate at each case phase.

Debrief

Record what changed your mind and what you would preserve differently. Debriefs feed the competency read on your Hunter Path.