@mydfir: I went from a Tier 1 analyst who questioned his own investigations to someone trusted to work through unfamiliar cases and train other analysts. And one of the biggest things I’ve learned is this. Knowing security is not the same as knowing how to investigate. You can have certifications. You can understand the tools. You can complete labs. But when someone asks “Walk me through how you’d investigate this.” Can you clearly explain what you would do? Why you would do it? What evidence you would want? What would make you widen the scope? What would change your conclusion? And can you defend your decisions when they start pushing back? That’s what I want to work on with 30 aspiring SOC analysts. This will not be another broad SOC course. This will be six weeks focused on investigations. Applications are opening soon!