The FBI opened a 22,000-square-foot Kinetic Cyber Range at its Huntsville campus in February 2025 to train agents and partners in responding to real-world cyberattacks.

Since opening, the facility has trained more than 1,400 participants from the FBI and partner agencies, focusing on high realism with active systems like directory services, email, and firewalls.

Instructors emphasize that cyber investigations require blending technical skills with interview and communication practices so companies understand what data is being collected and why during mock cases.

Training scenarios include ransomware attacks and the hard decisions investigators must make when critical infrastructure—such as hospitals—could be affected.

The program stresses real-world pressures, including patient safety and public impact, beyond purely technical containment when hospitals or utilities are involved.

Digital forensics training at the range covers techniques to break into encrypted devices and extract data, using tools that can be controversial due to vulnerabilities and exploit techniques.

The range houses a data center with more than 200 physical servers running Windows and Linux to mirror corporate environments encountered during breach response and investigations.

A core objective is teaching investigators to trace digital breadcrumbs across networks and jurisdictions while also honing soft skills for interactions during investigations.

The town is fully wired with functional devices and systems, including a hospital, homes, hotel, gas station, grocery, courthouse, roads, and a power utility, all designed to simulate real environments while attacks remain contained.

The built environment includes a hotel, hospital, gas station, courthouse, traffic signals, and more, with fully furnished town components to resemble a real U.S. community.

FBI officials frame the project as a response to rising cybercrime losses—about $20.9 billion in 2025—and escalating ransomware threats, to prepare investigators for high-stakes scenarios.

The timing of the reveal underscores concerns about AI-powered vulnerability discovery and faster cyber threats, underscoring the need for realistic training environments.