China OSINT & Dark Web CTI Training

Training program catalog

Start anywhere. Go as deep as the mission demands.

Three tracks, all updated for 2026 and taught on real investigations: the China OSINT path from entry to restricted, platform-specific social media trainings you can take in any order, and the Dark Web CTI path. Not sure where to start? Tell us your background and we'll point you to the right one.

China OSINT path

The core discipline, in order. Each program builds on the one before it — from your first Chinese investigation to the most restricted training we run.

5 programs · entry to restricted

01 Entry China OSINT Essentials From “where do I even start with China” to running a real investigation on your own. €4,30065 days · self-paced Open to anyone 02 Advanced China OSINT Advanced The full discipline, end to end — OSINT, SOCMINT, IMINT, GEOINT, corporate and cyber. €7,5004 months · 2 live lessons Corporate verification 03 Offensive Offensive OSINT Retrain how you see OSINT with penetration-testing tradecraft — and leave the average analyst behind. €6,30080 days · 2 live lessons Corporate verification 04 Master China OSINT Master The deepest China OSINT training that exists, with a dedicated Adversary Military Intelligence module. €35,0006 months · 5 live lessons Government only 05 Restricted China OSINT Elite Our most restricted program, built for a specific mission and a specific audience. United States only. On requestDisclosed on verified contact Active USG only

China social media intelligence

Platform-specific trainings. Not steps — take one, or all, in any order, with no prerequisites. One platform fully unlocked, or the whole social ecosystem in a single course.

3 programs · any order

• Platform-specific Full WeChat OSINT 2026 The platform everyone can register and almost no Westerner can truly access — unlocked. WeChat €90045 days · self-paced Open to anyone • Platform-specific Full Zhihu OSINT 2026 One platform, fully unlocked: get in without verification, then work it like a local. Zhihu €90045 days · self-paced Open to anyone • Whole ecosystem Full China SOCMINT The whole Chinese social ecosystem in one course, and how to follow the thread between platforms. Weibo · WeChat · Douyin · Xiaohongshu · Zhihu €3,0002 months · self-paced Open to anyone

Dark Web CTI path

Source development where the feeds can’t reach — forums, markets and infrastructure across English, Chinese and Russian ecosystems.

2 programs · no verification required

01 Practitioner Dark Web CTI Practitioner Learn to hunt where the feeds can’t reach — source development from the ground up. €2,9002 months · 2 live lessons Open to anyone 02 Advanced Dark Web Advanced CTI Source development as an art form: new C2 infrastructure, fresh domains, emerging markets and forums. €5,3004 months · 2 live lessons Open to anyone

Real, working capability

You learn the tradecraft until you're independently able to collect, search, pivot, bypass, access, verify, and create intelligence on China — you practice in real time, on real live targets start to finish. And when a method stops working, you have the framework for the next one.

Bypass and Access

The part no one else teaches: bypass and access methods so you're able to get past the registration, DPI, GEO, +86, and linguistic restrictions that stop everyone else — using our unique in-house developed frameworks, infused with a penetration-testing mindset.

Trusted where it counts

Our tradecraft is trusted by government, defense, and intelligence teams who can't afford to get it wrong — and Chinese state channels have flagged us as a threat. If the methods weren't real, no one would be watching.

Inside the training platform

Everything you need, in one platform.

Every training program lives on training.epcyber.com — structured lessons, hands-on labs, live field exercises, a working glossary, and full content. You practice the tradecraft, hands-on, in every lesson.

How you train

Zero theory. 100% practical.

Instead of just learning about China OSINT and walking away, we take a different approach: you actually practice end-to-end investigations, in real time, on real people and entities, using the methods we show you. We challenge every student in three ways.

Hands-on labs

You apply a method against a real target in China and check your answer on the spot, against other verified answers — the technique, method, or framework practiced on real entities we choose for you. You actually go out and investigate.

Field exercises

Open-ended, live work on real accounts, entities, and companies. Here you pick your own targets, run the method end to end, and see how far the trail goes — then take a technique we taught and pivot it into new results.

Exams

Each module ends with an exam. You choose the correct answer, confirming that everything the module covered is clear before you move on.

Each format sharpens your skills in a different way — so you're ready on real targets when the time comes.

Enter the training platform → Read testimonials →

GOT A QUESTION ABOUT OUR TRAININGS?

Not sure which program fits, or whether we cover what you need? Just ask.

We're happy to tell you whether a specific platform, or focus area is included in a given course — and if it's not, whether we can build it in.

Use the form below to ask about:

Whether we cover a specific platform (Weibo, Xiaohongshu, Douyin, CSDN, or anything not listed)
A particular focus area you need
Group rates, team enrollment, and custom corporate bundles
Eligibility — if you're unsure whether your organization qualifies
Payment options — wire transfer and other methods for organizations
Custom or tailored training built around your team's mission
Whatever you're trying to accomplish, tell us where you're headed and we'll point you to the right program.

Your email

What do you need?

Your message

Confidential. We don't share or sell contact details.

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

Why EPCYBER

We set the standard for China OSINT depth.

Anyone can claim China coverage. Almost no one gets flagged as a threat for it — or trusted by the teams that can't afford to be wrong. Here's what actually sets the training apart.

Adversary recognition

The adversary is watching.

The only China OSINT provider whose depth has been publicly called out by Chinese state-affiliated channels as a threat to the country's information environment. No other vendor in this market earned that. When the adversary is talking about your methods, you know they work.

Beyond OSINT

Past the walls, into the sources.

We combine OSINT with penetration-testing tradecraft. Where training built by analysts and journalists stops at what's reachable, we teach how to get past the access walls — so you see sources in China most analysts never can. Access is the whole point.

Content relevancy

Always the latest tradecraft.

Frameworks, methods, techniques, and search strategies are refreshed continuously, so you always work with current tradecraft — applied to real investigations, real entities, and complex chains. Latest refresh: May 2026.

Marketing transparency

See inside before you enroll.

We show results first. Redacted sneak-peeks from inside the content — slides, methods, techniques — so you can see exactly what's covered, how it's structured, and how it's taught before you ever commit.

Global reputation

Trusted where it counts.

Relied on by governments, intelligence agencies, Fortune 500s, military, and the security teams of global firms to build China-focused OSINT capability — tailored to their mission, across 40+ countries.

Student feedback

WHAT STUDENTS SAY

Goes in depth

I thought the course was really good. I appreciate someone taking the time to look deeper into this topic, as China-oriented OSINT is hugely important today, and yet, there's little training or practicable information out there. I appreciated your focus on pragmatic methods.

OSINT Lead — Booz AllenUnited States

Very practical

I sincerely thank you for this amazing pedagogy that you show in China OSINT — very clear and exhaustive. The practical approach makes complex techniques accessible.

Military Defense OfficerEuropean Defense Agency · France

Unique methods

Your China OSINT course covers unique methods that I have not seen anywhere else before, especially bypassing QQ or other technical restrictions. Really impressed.

Intel Delivery ExpertJapan

Clear structure

The modular breakdown made it easy to follow even without a Mandarin background. I came in expecting to be lost by module three and instead found myself taking notes on things I could apply the same week.

Threat Intelligence AnalystUnited Kingdom

Fills a real gap

Most OSINT training treats China as a footnote. This treats it as the main subject, and the difference in depth is obvious immediately.

Senior Research Fellow — Policy InstituteAustralia

Immediately usable

I applied the Baidu and Tianyancha workflows to an active case within two days of finishing. The corporate registry section alone justified the time.

Due Diligence Manager — Private Investigations FirmSingapore

Excellent tradecraft

The operational security guidance was thoughtful and realistic rather than paranoid boilerplate. Clear about what the actual risks are and what they aren't.

Cyber Threat Analyst — National CERTNetherlands

Worth every hour

Dense, but never padded. Every module earned its runtime, and the walkthroughs are the kind of thing you rewatch with a notebook open.

OSINT Instructor — Defence AcademyCanada

Great instructor

Responsive to questions and genuinely knowledgeable about the platform quirks that trip people up. You can tell this comes from real casework, not a literature review.

Investigative Journalist — IndependentTaiwan

Highly recommended

I've taken several OSINT courses over the years and this is the first one focused on Chinese-language sources that didn't feel like a translated version of a Western methodology.

Geopolitical Risk Consultant — ConsultancyGermany

Practical and current

The screenshots and walkthroughs reflect how the platforms actually look today, which is rarer than it should be in this field.

Corporate Security Lead — Technology SectorSouth Korea

Strong fundamentals

Good balance between tooling and method. Tools change; the reasoning taught here will outlast them.

Analyst — Financial Intelligence UnitSwitzerland

Our mission

Close the skill gap. Build OSINT experts.

Most training in this space — especially China OSINT and the dark web — hands you information and calls it training. We build the actual skills professionals need to move up: real, industry-relevant tradecraft you can put to work in the field.

EP

Eva Prokofiev

Founder & CEO

EPCYBER LLCMiami · Florida, U.S.

About the founder

A former Military Intelligence Officer from a Special Operations Division, Eva works at the intersection of OSINT, cyber threat intelligence, and collection across high-risk digital environments.

Over 15+ years she has trained and supported European defense contractors, US and NATO-aligned agencies, and intelligence teams operating in complex, sensitive regions. Her core expertise is China OSINT, dark-web intelligence, and advanced threat detection — and since early 2017, mapping and extracting intelligence from China's digital ecosystem, a focus that grew from personal interest into full-time practice.

An Oxford University Executive Leadership graduate (top honors), she earned her CISO certification at 22. Her background spans OSINT, IMINT, SOCMINT, GEOINT, CTI, and penetration testing across web, cloud, API, Docker, and IoT — with a focus on bridging intelligence gaps for European governments, financial institutions, and global organizations.

Former Military Intelligence · Special Operations Oxford Executive Leadership · top honors CISO certified at 22 China focus since 2017

Cited byU.S. Army War College · Defense Magazine · CIMSEC · leading European think tanks

Media inquiriesUse our contact form