Discretion · Precision · Results

Join the agency.
Close the case.

White Rabbit Forensics is a digital-forensics career simulator. You don't take a course — you take contracts: real evidence, industry tools, and an agency that's betting you're ready.

Analyst Access Portal● Restricted

General access is currently closed. Secure a place on the launch waitlist for the next public cohort.

By requesting access you agree to receive mission updates from Rational Mystic LLC. View data protocol.

Trusted tooling FTK Imager Autopsy Volatility Wireshark

workstation · live

SOURCEinnovtech_laptop.E01 SECTORS204,800 / 204,815 SHA-256✓ MATCH · 59bfbc02…c9efed

Open contracts3

CONTRACT 003 · CLI FORENSICS ● Active

The Midnight Shell

Client: Innovtech · Status: evidence acquired

CONTRACT 004 · PDF METADATA Pending

Paper Trail

Operational Reality

Not a course. A job you can practice.

Traditional training relies on static lectures. White Rabbit drops you inside a fully simulated forensic workstation and lets you do the work of a junior analyst — start to finish.

The Agency Model

You aren't a student; you're a Junior Analyst at White Rabbit Forensics, accepting contracts from corporate clients to investigate breaches, IP theft and insider threats.

Real Tradecraft

No simplified "toy" interfaces. You analyze evidence with industry methodology — hex editors, disk imaging, SQL analysis, log parsing and volatile-data acquisition.

Live Casework

Cases evolve. You receive emails, download disk images and draft incident reports. Your findings determine how the investigation ends.

Earned Realism

The actual tools.
The actual tradecraft.

Every contract is solved inside the same software a working examiner opens on day one — credible enough to put in front of a cohort.

FTK Imagerdisk imaging · hashing

Autopsyartifact analysis

Volatilitymemory forensics

Wiresharknetwork capture

Autopsy 4.22Data artifacts · evidence tree

FTK · hash verify

Autopsy · new case

The Contract Ladder

Seven cases. Nine ranks.
One white rabbit.

A narrative curriculum that escalates with your skill. Each contract teaches a discipline; each close earns a promotion.

001

Browser Forensics

history · cache

002

Disk Imaging

E01 · write-block

003

CLI Forensics

shell · logs

004

PDF Metadata

exif · authorship

005

Timeline Analysis

super-timeline

006

Network Forensics

pcap · exfil

007

Memory Forensics

volatile · RAM

Recruit→ Junior Analyst→ Analyst→ Senior Analyst→ Forensic Specialist→ Lead Investigator→ Case Officer

Meet the Agency

You won't work alone.

A team of mentors guides every contract — over chat, email and the occasional 2 a.m. call. They have opinions. Earn their trust.

Agnes Sterling

CEO

Founded the agency. Sees patterns no one else does.

Rex Vance

Director

Assigns your contracts. Expects clean chain of custody.

Reema Patel

Senior Analyst

Your mentor on the bench. Patient until you cut corners.

Jaxson Okonjo

Hardware Specialist

If it has a circuit board, he's already imaged it.

Kai Tanaka

Threat Hunter

Lives in the logs. Finds the attacker before they finish.

// the contract is open

Follow the white rabbit.

A covert forensics agency is recruiting junior analysts. Most never make it past the first contract. Will you?

Already cleared?