ShadowDragon Investigative & OSINT Training: Find People, Clues and Proof on the Internet

ShadowDragon Training has expanded to offer three publicly available courses to aid investigators grow, mature and dominate. Our goal is to help you navigate complex investigative cases, integrate OSINT analysis, monitoring and targeting and to challenge even your top tier investigative operators year after year. (SD-Training-Essentials-100)

The ShadowDragon Essentials (100) course goes over the essential usage of our tools for investigators utilizing them. While our tools do not offer a silver bullet solution, the tools augment specific areas in the analyst life. The essentials course is geared to make sure they hit the ground running with the solutions we offer.

The ShadowDragon Advanced (200) Zero-Profile Attribution Course is a 2-day class that provides an overview of the investigative process and the tools that can be used to target and speed data collection. Learn how to stealthily hunt, collect and verify OSINT and push the boundaries of your investigative capabilities on cases that may span continents and decades. (SD-Training-ZPA-200)

We cover what tools to use - and not use, when to use them, how to scale an agile team, and when to play offense to solve difficult problems. We will discuss strategic deployment of contractors to verify attribution and other scenarios that may help disrupt a combination of complex espionage, insider threats and a mixture of the modern blending of threats.

The ShadowDragon Interactive Cyber Competition (300) is a 2-day class created to challenge the best investigators. The class will challenge investigators in a capture the flag scenario which pushes their boundaries of comfort in multiple dimensions. (SD-Training-ICC-300).

Expectations and Goals

Students will become proficient in performing basic to complex cyber investigations. They will leave with a clear understanding of the investigative process and how to use digital tools to perform research.

Training Essentials (100 Class)

SKU SD-Training-Essentials-100

  • We recommend users of our tools to have a basics in investigation workflow while also understanding where a tool start and stops and investigative craft is required.
  • Training Essentials class covers the specific tool you are utilizing (SocialNet, MalNet, Spotter, AliasDB or OIMonitor).
  • Training Essentials

Training Zero Profile Attribution (200 Class):

SKU SD-Training-ZPA-200

  • Key Principles
  • Dossier Building
  • Investigative principles and fundamentals
  • Link analysis and OSINT
  • Timeline Analysis
  • Targeting, verification & risks
  • Developing real-world targets
  • How and when to document
  • Where to find clues
  • Tips and best practices
  • Artifact Practicals
  • Advanced Scenarios – Hunting Fraudsters to Spy Masters

Who Should Take This Course (200)

This course is designed to be beneficial for any professionals charged with performing cyber investigations. This includes individuals at any level in cyber security, information security, intelligence analysis, corporate security or physical security. We have special expertise in training Law Enforcement through our relationship with DeliverFund.

Training Interactive Cyber Competition | CTF (300 Class):


  • 2 Day class covering interactive capture the flag scenarios.
  • Challenging OSINT and logical analytical skills.
  • Pass or Fail.
  • Students in 300 will be expected to work as a team or as an individual.

Who Should Take This Course (300)

This course is designed to be beneficial for any professionals charged with performing cyber investigations who has passed 200 level courses and wants to be the leader or wants to be challenged.

Get Started With Training Classes


ShadowDragon Essentials (100) - 1-Day Training for New Users of our tools. Basics in investigation workflow while also understanding where a tool usuage start and stops and investigative craft is required. Student or Classes can be booked.


ShadowDragon Zero-Profile Attribution (200) - 2-Day Training for Cyber Analyst. Deeper into the craft of investigation with deeper scenarios.

You Will Need

  • Laptop with wireless access, 8 GB
  • Essentials Training Class covering SocialNet with Kaseware or SocialNet with Maltego
  • Maltego Clasic – Commercial Edition (Some users will use Maltego if they prefer or Kaseware)
  • Or Laptop with Chrome Installed

We Will Provide

  • Training licenses for use in class: SocialNet, OIMonitor, MalNet
  • Training box
  • USB Drive with copy of the course pages
  • Training Certificate

Upcoming Training Options

We will be holding multiple training courses in the fall of 2018. Locations and times will be announced soon. Sign up below to be contacted when information is announced.

In addition you can schedule a customized training package for your group or corporate team by emailing us.