DoD Cyber Crime Center (DC3)

The Department of Defense Cyber Crime Center, known as DC3, is a United States federal cyber centre. It provides digital forensic investigations, cyber threat intelligence, vulnerability discovery and cyber training. Its work protects the Department of War and its partners and supports cyber readiness.

DC3 organises its work into six mission areas. These cover training, digital forensics, cybersecurity collaboration, operational enablement, enterprise technology and vulnerability disclosure. It also works with industry partners in the Defense Industrial Base, often called the DIB.

The DC3 Cyber Training Academy trains Department of War teams that protect its information systems. It publishes a yearly course catalogue. The DoD-Defense Industrial Base Collaborative Information Sharing Environment, called DCISE, works with private industry to protect critical programs and information on DIB networks. Its products include threat activity reports, alerts and advisories, and quarterly reports on threats that DIB partners report. A weekly indicator roundup gathers threat indicators into one product, and TIPPER alerts partners by email about suspicious activity that affects them.

The Cyber Forensics Laboratory analyses digital evidence for Department of War agencies. The Operations Enablement Directorate amplifies the effects of law enforcement and counterintelligence investigations across the department. An information technology group supports DC3 with tools for digital forensics and cyber intrusion analysis. The Vulnerability Disclosure Program finds weaknesses in Department of War information networks, so they can be fixed.

DC3 reports results in its 2025 annual report. It says it delivered more than 248,000 cyber training hours and identified more than 58,000 vulnerabilities. It shared more than 170,000 threat intelligence indicators. It also says it helped prevent potential losses of more than 18 billion dollars.

DC3 joins other U.S. and international agencies to issue public cyber advisories. In 2026 these covered a North Korean threat group, Gunra ransomware and a Russian state-sponsored phishing campaign.

Services

• Digital forensic investigations
• Cyber threat intelligence
• Vulnerability discovery
• Cyber training
• Defense Industrial Base cybersecurity
• Cyber threat advisories
• Operations enablement
• Vulnerability Disclosure Program