Davide Inzerillo
With 15 years of experience in the software industry, I have transitioned from test automation to full-stack development, always maintaining a strong focus on secure coding practices and authentication protocols. Currently, I am a developer at Mentat, where I build solutions tailored for SOC analysts, blue teams, incident responders, and digital forensics experts. I work on Gulp, a tool we utilize to streamline incident response workflows. Outside of my professional role, I am a contributor to the Security Cert community.
Session
Modern Digital Forensics and Incident Response (DFIR) investigations require analysts to process large volumes of heterogeneous data, correlate evidence from multiple sources, and quickly reconstruct attack timelines without losing context. Gulp (Graphical Universal Log Processor) is designed to address these challenges by providing a flexible, visual platform for exploring, correlating, and analyzing logs and digital artifacts, complementing existing forensic workflows rather than replacing them.
This session introduces the GULP project, its architecture, and the challenges it is designed to address. The core of the presentation is a hands-on investigation that walks attendees through the different stages of a real-world attack. It also demonstrates how GULP can be used to analyze data collected from third-party forensic tools and log sources, leveraging graphical visualizations and contextual correlations to accelerate investigations and improve the understanding of complex attack scenarios.