ZEKASTRA / Synthetic case workshop

Missing USB

Reconstruct a fictional four-event timeline using sample mail, access, copy and session records. Every name, log and event is invented for learning.

TRAINING DATA ONLY — not actual evidence. Dates are October 9, 2026. Timestamps include UTC (Z) or an explicit +03:00 offset. Selected JSON files are read only in your browser.

01 / Examine

Download the case materials

JSONStructured fictional event log CSVSpreadsheet-compatible event log TXTHarmless synthetic fingerprint sample

SHA-256 of the exact sample TXT bytes (UTF-8 and final newline):

981f4557f0dd5f1a3821b826d2095f01c9ce65eecba391d93a387eda3503deeb

Verify the sample in the local file lab →

02 / Reconstruct

Order the events from earliest to latest

Choose each record once. The explanation uses explicit offsets rather than guessing from the clock text.

Optional: read your own explicitly synthetic JSON case (maximum 64 KiB)

03 / Explain and produce

Produce a verified training note

A correct timeline unlocks the chronological explanation. Review and edit it before using it elsewhere.

Editable case note

Use this note in the five-format studio (copy and paste) →

04 / Continue learning

What can the records establish?

Correctly ordering timestamps shows the sequence encoded in these synthetic records. It does not establish a real person's identity or an actual device action.

Try a digital literacy challenge →