Defensive OSINT lab
Practice OSINT, source validation, and incident analysis with safe fictionalized cases.
This lab uses fictionalized/sanitized data. Do not use it to target people, expose identities, or test live systems.
2D Pixel Analyst Profile
Level 1 / Analyst Trainee
The profile token is stored in this browser. The leaderboard only shows nickname, score and solved count.
After the first save, solves are written to the backend leaderboard.
Public profile link
Create a nickname first to get a shareable profile link.
Badges
Leaderboard
Only nickname, score and solved count are shown. Flag values are never shared.
Loading...
Pick a case, review the evidence, write your defensive report.
Reconstruct the timeline and analyze public indicators of compromise (IOCs) from the SolarWinds Orion supply-chain attack.
Map the exploitation timeline of CVE-2023-34362 in MOVEit Transfer and assess the extortion campaign behavior.
Trace the cascading supply-chain compromise of the 3CX DesktopApp and identify attacker infrastructure.
Analyze the public communications, threat actor claims, and official reports of the Colonial Pipeline ransomware incident.
Analyze the support-system breach at Okta, evaluating HTTP Archive (HAR) file security risks and token hijacking vectors.
Unravel a fake job-offer phishing chain built around a lookalike company domain and a bogus meeting-verification host, without ever clicking a live link.
Decide whether a viral 'live protest' video really shows the claimed event by cross-checking reverse-search results, visual clues, and official statements.
Test whether a Telegram channel claiming a 'full database dump' of a hospital breach is genuine, by comparing post timing, file hashes, and the official disclosure record.
Cluster two fake disaster-donation domains through shared registration metadata and a reused payment wallet, and separate them from the legitimate relief foundation they impersonate.
Audit a wire photo whose caption says 'last night's factory fire' against its EXIF summary and archive matches, then draft an ethical correction for the newsroom.
Jump to the evidence log or the report builder.
