Expert-led training
Cyber Fire events are led by expert security investigators from United States Department of Energy National Laboratories. Our instructors have performed cybersecurity investigation and research continuously since 2005.
Learn by doing
Classes are lab-heavy: staff help each participant with their specific struggles. Many Cyber Fire events forgo instruction entirely, with staff in a mentorship role instead of instructor.
Fundamentals, not recipes
In-depth investigation requires approaching each incident creatively. Instead of providing a book with a few sample recipes, we help participants tailor unique solutions for each different problem.


Cyber Fire Foundry
Our signature 5-day training event. Learn how to create your own custom tools, and mount an agile response to evolving theats. Open to all US Government and Critical Infrastructure.

Cyber Fire Simulation
Spend 5 days working on evidence real data from a single historical event, with assistance from veteran responders. For DOE and DOE contractors only.

Cyber Fire Summer School
10-week internship featuring Cyber Fire instruction and data manipulation, using real forensic data from a historical intrusion.