Missions / HUNT 02
The Fake Vendor
A synthetic supplier invoices a fictional company. The pretext is ordinary. That is the point.
Target / incident
Business email compromise pretext inside an Academy-controlled mail environment.
Known facts
- · Invoice template reused with one changed account number.
- · Domain registered 9 simulated days before contact.
Unknown variables
- · Who controls the receiving account.
- · Whether an insider assisted.
Evidence locker
Evidence Lab →- E-006 Mail header analysisVERIFIED
Network graph
Synthetic graph · Academy range
Entity inspector
Select an entity to inspect its relationships and edge confidence. Dashed edges are low confidence — they are leads, not findings.
CARTOGRAPHER note: two clusters now share one registrar artifact. Bridge confidence is moderate and a human must sign the assessment.
Mission clock
Closed
The clock is pressure, not a scoring device. Rushing evidence costs more than missing the deadline.
Objectives
- ■Reconstruct the timeline
- ■Identify the pretext structure
AI war room
COUNSEL
Note which of your findings would need legal process in a real case.
Team chat — HUNTER CELL 04-B
R. OKAFOR · Evidence Custodian
I will not sign the referral while E-019 has no source.
S. VANCE · Cartographer
Two clusters bridge through one artifact. That is thin.
JORDAN ELLIS · Lead Investigator (rotating)
Agreed. Reframing the primary hypothesis before the debrief.
Legal status
Academy-controlled environment only.
Discovery is not authorization.
Debrief
Every mission closes with a debrief: what you believed, when you believed it, what changed your mind, and what you would have preserved differently.