The Forge Wins Wall

"I just landed a job in incident response. The DFIR lab I did contributed to that hire for sure!"

"I finally received an offer for a Cyber Operations Analyst position after years of trying to break into the industry. I came very close to giving up, and I'm incredibly glad I didn't. Everything Steven teaches here aligns so well with the actual job responsibilities and the types of questions and scenarios you'll encounter during an interview."

"It's this whole investigation process and building that methodology about learning how to do the investigations. I didn't learn that in TryHackMe. I didn't learn that in Hack The Box. It's a lot of stuff that I'm pretty sure job sites or companies wish they had."

"Today I received my first offer for a SOC Analyst role. I genuinely don't think I would have developed the technical knowledge or confidence for interviews without this course. A Senior SOC Analyst saw my lab projects on LinkedIn and referred me internally."

"I finally landed a job. I'm working as a SOC Specialist now at a big tech company. I come from a red teaming background, and following Steven and learning from him helped me develop my skills and build my profile."

"During the interview, I didn't struggle much with the questions because the topics you taught were exactly what they asked. MITRE ATT&CK, IR Frameworks, the scenario based questions, it is really on point."

"Thanks to your video and the quality of your labs, I was able to level up during my career change, and I just landed my first job as a Security Operations Engineer."

"I just passed my CompTIA Security+, and I've been accepted for a cybersecurity internship at a large professional services firm as part of my end-of-studies."

"Steven doesn't just teach concepts, he builds confidence, discipline, and the right mindset needed to grow in cybersecurity. Your guidance has shaped many careers, including mine."

"My final interview involved completing a scenario, writing a report, and walking the panel through my investigation. It felt like another MyDFIR scenario. My report writing, analysis process, and confidence all improved massively because of this community."

"I've spent the last year grinding: hundreds of TryHackMe labs, tons of MYDFIR content, and building my own on-premises SOC/SIEM/EDR lab environment. It's really possible."

"I came from K-12 IT with no certifications and no formal security title. The MYDFIR community played a huge part. CTFs, challenges, scenario work, discussions, and the accountability to keep showing up. This is proof that the nontraditional paths work too."

"18 months ago I quit my job as a Store Manager in luxury jewellery. I followed Steven's roadmap for complete beginners with zero IT background. Got my Sec+, built labs non-stop, created a portfolio. The first response I got was the only one I needed."

"The course material is kept formal, yet without sacrificing the practical 'street' type wisdom from years of experience, providing an analyst's way of thinking, which other courses seem to lack."

"I've recently joined the SOC team at my current organization. Your course has been phenomenal and has truly helped me along the way. Although I'm only halfway through, I can already see the tremendous value it offers."

"I just got a L2 Security incident response role. Thank you for your course."

"My confidence has gone through the roof. I can build a timeline and explain what happened first, why it happened, and what the impact is. You don't get this kind of hands-on experience on other platforms."

"The 90 day SOC Accelerator along with the community has been a game changer for me. It helped me settle my foundational knowledge and trace a pathway that I'm now comfortable with. Even when I felt lost, the community had a lot of resources to help me."

"My background is in classical music. You put in the reps, you put in the hard work, and you can go from anywhere. I've never been part of a community like this, where people say 'I wrote this report, can you take a look at it?' It's 100% worth the investment."

"I had a bachelor's in computer science, a master's in cybersecurity, and a Security+, but it was just theory. I didn't know how to triage or investigate an alert before. Now I'm fairly confident triaging and investigating an alert using Splunk or Sentinel and providing a report."

"By the end of the 90-Day SOC Accelerator I understood what it meant to be a SOC analyst and tackle challenges in a SOC environment. The best part is it doesn't stop there, with Splunk and Microsoft Defender challenges, hands-on projects, and a new DFIR course."

"I enjoyed the Accelerator. It's great both for people trying to get into blue teaming and for people with experience looking to deepen their skills, like myself. The third month gets deep into investigation using MITRE. It really challenges you."

"I had multiple certifications, done the labs on all the sites from TryHackMe to LetsDefend, and still couldn't complete a CTF. I floundered trying to hunt or triage an alert. Steven taught me how to develop an investigative mindset. He had a process that forced me to slow down and helped me develop an understanding of how to hunt. Worth every penny."

"Everything that I learned here is the reason why I landed a role. Not a new certification, not a degree. The labs, the investigations, the SOC simulator, the weekly meetings, participating in the CTFs, every single one of those things is what made the difference in my interview. Trust the process."

"The 90-Day SOC Accelerator mimics a real world SOC environment. I went from having no clue about SOC to investigating real incidents, analyzing logs, threat hunting, and triaging alerts confidently, something I wouldn't have done three months prior."

"The 90 Day SOC Accelerator helped me connect cybersecurity concepts to real SOC work. My favourite part was the Art of Investigations section, it showed how to approach alerts, build timelines, and think like an analyst rather than just follow steps."

"The 90 days I call the SOC Bible, no joke. Gold nuggets throughout. Coming out of it I'm comfortable triaging alerts end to end, pivoting through Splunk and XDR, building detections, and writing up incidents the way you'd actually hand them off in a real SOC."