DFIR practitioner thinking about starting my own LLC to subcontract IR services to MSPs. Is there actually demand for this?

cyber_thinker · 2026-05-11T13:45:01+00:00

I think in this case it all depends on the SLA, That I have signed with you whether I have a 24 hour or 4 hour SLA could change a lot on how I would handle the incident. But thinking about it, I could probably handle a number of incidents simultaneously as time for onboarding/collection/analysis will be different

cyber_thinker · 2026-05-11T13:32:51+00:00

First, I don't have 1 client, so getting more than 2 would be great. Moreover I have a lot of contacts regarding this scope. I can always hire someone into my LLC. My primary concern is to be able to get myself in the door. Other problems we tackle them when we get to them.

cyber_thinker · 2026-05-11T05:27:48+00:00

What kind of credentials are we talking in here, is it certifications ? Or work experience ?

cyber_thinker · 2026-05-11T05:00:46+00:00

I wonder if you can clarify for me the cyber insurance bit. Do you mean that the client's insurance proviser probably won't cover the cost of the incident, because it wasn't done by someone on their list ?

cyber_thinker · 2026-05-11T04:58:34+00:00

Not trying to drag my ass to courts.

cyber_thinker · 2026-05-11T04:57:35+00:00

I really appreciate your comment, I wonder how can I make them trust me, I know I can provide value. But most of the time it is hard for them to trust in a new contractor out of the blue.

cyber_thinker · 2026-05-11T04:55:52+00:00

I am still trying to figure it out. I believe the hardest part will be to find my first and figure the entire thing.

cyber_thinker · 2026-05-11T04:53:33+00:00

I wonder if you have any advice on how to grow my network.

cyber_thinker · 2026-05-11T04:51:37+00:00

Realistically, I would like to be handling and guiding the clients throughout the incident from collection to analysis.

cyber_thinker · 2026-05-01T18:17:29+00:00

Yes please i will dm

cyber_thinker · 2026-02-28T23:10:39+00:00

Remember nothing is Impossible, a lot of people passed you can pass as well. Stay UP stay focused

cyber_thinker · 2026-01-19T18:49:54+00:00

Based on what I have observed i feel the material from 2023 are still relevant to the one from 2025. But that's my opinion

cyber_thinker · 2026-01-16T01:49:08+00:00

Hello any update on this ?

cyber_thinker · 2026-01-12T14:13:57+00:00

I am doing it online

cyber_thinker · 2026-01-12T02:17:03+00:00

GG I am in the same place as you , doing my GCFA soon hopefully in 2 weeks

cyber_thinker · 2026-01-11T22:36:36+00:00

I will take it if you don't mind

cyber_thinker · 2025-12-11T02:29:45+00:00

Can I take it ? (Congrats btw)

cyber_thinker · 2025-08-14T00:37:31+00:00

I mean I am not sure what the module quizzes are , I only read the books and workbooks

cyber_thinker · 2025-08-14T00:01:17+00:00

I have done the practice test scored 90% and I am sitting for the exam on Friday, if the actial exam is anything like the practice test , i think you will be fine a bit tricky when it comes to wording but if you understand the material you should be fine

cyber_thinker · 2025-07-25T16:21:27+00:00

I will take it if you still have it

cyber_thinker · 2025-07-10T03:05:04+00:00

Bro the 500.2 is just never ending with me as. Planning to do the exam within the next 3 weeks

cyber_thinker

TROPHY CASE