// synthetic fixtures

evidence library

36 deterministic fixture scenarios — each maps to a case type, ships a downloadable evidence zip, and (when published) links to a reference proof. start at forensics home or browse the coverage map.

fixture scenarios

sorted by case type, then slug. evidence downloads are zipped synthetic artifacts only — safe for local replay and tool QA.

scenariocase typeevidenceproof
meridian-atoaccount takeover (ATO)download zipmeridian-ato
chen-ai-content-disputeAI-generated content disputedownload zipchen-ai-content-dispute
novak-api-key-leakAPI key leak / repo compromisedownload zipnovak-api-key-leak
bec-sterlingbusiness email compromise (BEC)download zipbec-sterling
hartmann-cloud-compromisecloud account compromise (M365 / Workspace)download ziphartmann-cloud-compromise
voss-wallet-draincrypto theft / wallet draindownload zipvoss-wallet-drain
vega-cryptojackingcryptojackingdownload zipvega-cryptojacking
ellis-cyberstalkingcyberstalkingdownload zipellis-cyberstalking
ashford-ddos-investigationDDoS investigationdownload zipashford-ddos-investigation
arias-deepfake-investigationdeepfake investigation (video / audio / image)download ziparias-deepfake-investigation
park-disgruntled-exitdisgruntled employee exitdownload zippark-disgruntled-exit
thorne-document-forgerydocument forgery / disputed authenticitydownload zipthorne-document-forgery
grant-election-integrityelection integrity investigationdownload zipgrant-election-integrity
quinn-equity-grant-auditequity grant / cap table investigationdownload zipquinn-equity-grant-audit
lyons-global-mobility-auditglobal mobility / relocation auditdownload ziplyons-global-mobility-audit
fischer-healthcare-breachhealthcare data breachdownload zipfischer-healthcare-breach
vance-hr-platform-auditHR platform audit / HCM integritydownload zipvance-hr-platform-audit
kline-insider-exfilinsider threat / data exfiltrationdownload zipkline-insider-exfil
brooks-ipv-techintimate partner violence — tech traildownload zipbrooks-ipv-tech
cole-invoice-fraudinvoice fraud / vendor account changedownload zipcole-invoice-fraud
walsh-lost-stolen-devicelost or stolen devicedownload zipwalsh-lost-stolen-device
rivera-mobile-triagemobile device triage (consent-based)download ziprivera-mobile-triage
brennan-payroll-fraudpayroll fraud / ghost employeedownload zipbrennan-payroll-fraud
northwind-phishing-campaignphishing campaign investigationdownload zipnorthwind-phishing-campaign
miranda-pig-butcheringpig butchering / long-con investment scamdownload zipmiranda-pig-butchering
ransomware-acme-corpransomware responsedownload zipransomware-acme-corp
foster-romance-scamromance scamdownload zipfoster-romance-scam
hayes-sextortionsextortiondownload ziphayes-sextortion
reed-smart-home-compromisesmart home compromisedownload zipreed-smart-home-compromise
sarah-androidstalkerware sweep (mobile)download zipsarah-android
sarah-iosstalkerware sweep (mobile)download zipsarah-mobile-stalkerware
helix-supply-chain-compromisesupply chain compromisedownload ziphelix-supply-chain-compromise
grayson-tech-support-scamtech support scamdownload zipgrayson-tech-support-scam
hughes-trade-secret-thefttrade secret / IP theftdownload ziphughes-trade-secret-theft
morgan-whistleblower-retaliationwhistleblower / retaliation investigationdownload zipmorgan-whistleblower-retaliation
parker-workplace-harassmentworkplace harassment / hostile workplacedownload zipparker-workplace-harassment
ready