calligraf0
Offensive Security @ Mentat.
I'm a cybersecurity professional specializing in penetration testing, offensive security, and security research. Since 2017, I work mostly on vulnerability research and development.
I am also a member of the core development team behind gulp, an open-source incident response tool designed to streamline security operations and analysis.
Session
Modern Digital Forensics and Incident Response (DFIR) investigations require analysts to process large volumes of heterogeneous data, correlate evidence from multiple sources, and quickly reconstruct attack timelines without losing context. Gulp (Graphical Universal Log Processor) is designed to address these challenges by providing a flexible, visual platform for exploring, correlating, and analyzing logs and digital artifacts, complementing existing forensic workflows rather than replacing them.
This session introduces the GULP project, its architecture, and the challenges it is designed to address. The core of the presentation is a hands-on investigation that walks attendees through the different stages of a real-world attack. It also demonstrates how GULP can be used to analyze data collected from third-party forensic tools and log sources, leveraging graphical visualizations and contextual correlations to accelerate investigations and improve the understanding of complex attack scenarios.