Racing against the clock: using Capture the Flag challenges to advance police training

When the first alert sounded in the training room, one of the officers glanced at their teammates. Their mission: trace the source of a simulated ransomware attack before it spreads. This was not a typical lecture, it was CEPOL’s first Capture the Flag (CTF) challenge, an exercise designed to test and build cybercrime response skills in real time. Over the next two hours, what began with focus and determination turned into a race against the clock.

The need for hands-on cybersecurity skills

In today’s digital landscape, police officers face threats that go far beyond the physical world. Cybercrime is on the rise, and traditional classroom learning is not always sufficient to prepare officers for the fast-paced and unpredictable nature of real-world attacks. To address this gap, EU4Security Moldova introduced CTF challenges: gamified, scenario-based competitions where teams solve cybersecurity puzzles that mirror the threats they may encounter in practice.

The challenge and the journey: learning by doing

Introducing CTFs into CEPOL’s training curriculum was both exciting and challenging. For many officers, the concept was new. Some were eager to dive in straight away, while others approached the technical puzzles with caution at first. The challenges were real: learning digital forensics tools, collaborating under pressure, and communicating effectively across teams with varying technical backgrounds. 

The resolution: skills, confidence, and discovery

The outcomes of these CTF challenges have been significant. Officers have gained practical experience in digital forensics, open-source intelligence (OSINT), threat detection, and incident response, skills directly transferable to real investigations. At the same time, teams have strengthened their communication, problem-solving abilities, and confidence under pressure.

Feedback has been very positive:

As one participant shared, “After the CTF exercise, I feel much more prepared to handle cybercrime investigations in the field.” 

In fact, 95% of officers reported greater confidence and readiness to respond to digital threats after participating in the challenge.