The Forge Wins Wall

"It's this whole investigation process and building that methodology about learning how to do the investigations. I didn't learn that in TryHackMe. I didn't learn that in Hack The Box. It's a lot of stuff that I'm pretty sure job sites or companies wish they had."

"Today I received my first offer for a SOC Analyst role. I genuinely don't think I would have developed the technical knowledge or confidence for interviews without this course. A Senior SOC Analyst saw my lab projects on LinkedIn and referred me internally."

"I finally landed a job. I'm working as a SOC Specialist now at a big tech company. I come from a red teaming background, and following Steven and learning from him helped me develop my skills and build my profile."

"During the interview, I didn't struggle much with the questions because the topics you taught were exactly what they asked. MITRE ATT&CK, IR Frameworks, the scenario based questions, it is really on point."

"Thanks to your video and the quality of your labs, I was able to level up during my career change, and I just landed my first job as a Security Operations Engineer."

"I just passed my CompTIA Security+, and I've been accepted for a cybersecurity internship at a large professional services firm as part of my end-of-studies."

"Steven doesn't just teach concepts, he builds confidence, discipline, and the right mindset needed to grow in cybersecurity. Your guidance has shaped many careers, including mine."

"My final interview involved completing a scenario, writing a report, and walking the panel through my investigation. It felt like another MyDFIR scenario. My report writing, analysis process, and confidence all improved massively because of this community."

"I've spent the last year grinding: hundreds of TryHackMe labs, tons of MYDFIR content, and building my own on-premises SOC/SIEM/EDR lab environment. It's really possible."

"I came from K-12 IT with no certifications and no formal security title. The MYDFIR community played a huge part. CTFs, challenges, scenario work, discussions, and the accountability to keep showing up. This is proof that the nontraditional paths work too."

"18 months ago I quit my job as a Store Manager in luxury jewellery. I followed Steven's roadmap for complete beginners with zero IT background. Got my Sec+, built labs non-stop, created a portfolio. The first response I got was the only one I needed."

"The course material is kept formal, yet without sacrificing the practical 'street' type wisdom from years of experience, providing an analyst's way of thinking, which other courses seem to lack."

"I've recently joined the SOC team at my current organization. Your course has been phenomenal and has truly helped me along the way. Although I'm only halfway through, I can already see the tremendous value it offers."

"I just got a L2 Security incident response role. Thank you for your course."

"My confidence has gone through the roof. I can build a timeline and explain what happened first, why it happened, and what the impact is. You don't get this kind of hands-on experience on other platforms."

"By the end of the 90-Day SOC Accelerator I understood what it meant to be a SOC analyst and tackle challenges in a SOC environment. The best part is it doesn't stop there, with Splunk and Microsoft Defender challenges, hands-on projects, and a new DFIR course."

"I enjoyed the Accelerator. It's great both for people trying to get into blue teaming and for people with experience looking to deepen their skills, like myself. The third month gets deep into investigation using MITRE. It really challenges you."

"I've been with MYDFIR since October of last year, and this was the best decision I made in this journey. Steven helped me put all this theoretical knowledge and labs together to truly understand what happens behind the hood and how to build an investigation. I had two interviews and excelled at both. While I didn't have answers to some questions about coding, Linux, or REGEX they still walked away knowing I was more than able to succeed at the most important part of the job; the hunt."

"The biggest thing for me is the amount of value it provides. You get to be in a place where everyone has the same drive and similar end goals. So many labs, projects, portfolio and resume skills, CTFs. It's never a boring day in the Forge."

"The 90-Day SOC Accelerator mimics a real world SOC environment. I went from having no clue about SOC to investigating real incidents, analyzing logs, threat hunting, and triaging alerts confidently, something I wouldn't have done three months prior."

"The 90 Day SOC Accelerator helped me connect cybersecurity concepts to real SOC work. My favourite part was the Art of Investigations section, it showed how to approach alerts, build timelines, and think like an analyst rather than just follow steps."

"The 90 days I call the SOC Bible, no joke. Gold nuggets throughout. Coming out of it I'm comfortable triaging alerts end to end, pivoting through Splunk and XDR, building detections, and writing up incidents the way you'd actually hand them off in a real SOC."