[ PRESS ANY KEY TO SKIP ]
AI CASE GENERATOR
POWERED BY CLAUDE — UNIQUE CASE EVERY TIME
INITIALIZING...
SCANNING...
DIGITAL FORENSICS TRAINING SYSTEM
OPERATION WRAITHNET — FOUR CASES. ONE CONSPIRACY.
DIFFICULTY:
CIPHER v3.0 // SARAHTONIN SECURE & TECHNOLOGIX
⬤ LIVE FEED // WRAITHNET exfiltration confirmed — 847 GB transferred // Suspect PHANTOM still at large // TOR exit node flagged: 185.220.101.x // Accomplice "SPECTER" identified — mobile device recovered // Memory dump CF-0849 ready for analysis // New evidence: network pcap 4.2GB // ⬤ ALL ANALYSTS REPORT TO STATION
CASE SELECT — OPERATION WRAITHNET
COMPLETE ALL FOUR CASES TO CLOSE THE INVESTIGATION
THE STORY SO FAR: On December 12, 2024, a sophisticated multi-stage data exfiltration was executed against NexCorp Financial. An insider threat actor codenamed PHANTOM worked with an external accomplice — SPECTER — to extract 847 GB of client records. Four forensic disciplines stand between you and a prosecution. Each case reveals a new layer of the conspiracy.
ANALYST PROFILE
RANKS · ACHIEVEMENTS · STATISTICS
🎓
TRAINEE
0
TOTAL SCORE
0 pts to next rank
// STATISTICS
// ACHIEVEMENT BADGES
// RANK PROGRESSION
TRAINING LAB
STANDALONE SKILL DRILLS — NO CASE REQUIRED
🔓
PASSWORD CRACKER
DIFFICULTY: MEDIUM
Select mutation rules and launch dictionary attacks against hashed passwords. Learn why weak passwords fail against real cracking techniques.
DICT ATTACK RULE-BASED HASH ANALYSIS
🖼️
STEGO DECODER
DIFFICULTY: HARD
Analyze images for hidden data. Toggle RGB bit planes, adjust LSB thresholds, and extract concealed messages embedded in plain sight.
LSB ANALYSIS BIT PLANES HIDDEN DATA
🛡️
FIREWALL BUILDER
DIFFICULTY: MEDIUM
Build ACL rules against a live packet stream. Order matters — wrong rule priority lets attackers through. Race escalating traffic waves.
ACL RULES RULE ORDER LIVE TRAFFIC
⏱️
INCIDENT TIMELINE
DIFFICULTY: HARD
Attack events drop in real-time. Drag each into the correct MITRE ATT&CK phase before it hits the floor. Speed and accuracy both count.
MITRE ATT&CK KILL CHAIN TIMED
// PASSWORD CRACKER✕
// STEGANOGRAPHY DECODER✕
// FIREWALL RULE BUILDER✕
// INCIDENT TIMELINE — MITRE ATT&CK✕
USB
FILE SYS
HEX VIEW
METADATA
📁 EVD_2024_0847
📁 RECOVERED
⚠ deleted_0x44F2A.jpg
📄 chat_log_dec12.txt
📄 browser_history.db
📁 SYSTEM
⚙ prefetch_cache.bin
⚠ .hidden_config
🔴 [ENCRYPTED] vault.enc
CASE BRIEF
💾
USB DEVICE
🖥️
TERMINAL
🔍
EVIDENCE
💿
HDD_EVD
🌐
NETWORK
CASE---
SCORE0
MODULES0/3
CASE1/10
ACTIVE CASES▼
TOOLS
ANALYSIS PROGRESS
FINDINGS
🏆 ANALYST LEADERBOARD✕
⚖️ WRAITHNET EVIDENCE CHAIN✕
💡 ANALYST HINTS✕
// CASE BRIEFING✕
// DISK IMAGER — EVD_DRIVE_A✕
WHAT IS THIS?A bit-stream image copies every sector including deleted files. Click sectors to image them. Corrupt sectors (red) auto-recover via parity reconstruction.
Sectors:0/128  Errors:0  Recovered:0
// OSINT PROFILER✕
// EXIF METADATA TIMELINE✕
// NETWORK PACKET ANALYZER✕
// MEMORY FORENSICS — RAM DUMP✕
// MOBILE DEVICE FORENSICS✕
// DARK WEB INTELLIGENCE✕
// CRYPTANALYSIS — VAULT.ENC✕
// CLOUD FORENSICS — AWS AUDIT✕
// EMAIL FORENSICS — PHISHING✕
// MALWARE ANALYSIS — WRAITHRAT✕
// THE PROSECUTION — FINAL CASE✕
// CASE 2 BONUS — FIREWALL CHALLENGE✕
// CASE 4 BONUS — STEGO DECODER✕
// CASE 5 BONUS — PASSWORD CRACKER✕
// CASE 7 BONUS — LOG PARSER✕
// CASE 9 BONUS — MITRE ATT&CK DRILL✕
🏆
CASE CLOSED
0
CASE SCORE
SYSTEM ONLINE
CIPHER v3.0
OPERATION WRAITHNET