About

About

Bridging digital forensics, incident response, and cybersecurity research to investigate and understand complex threats.

Digital Forensics & Incident Response specialist, currently pursuing a Master's degree in Cybersecurity at the University of Bari Aldo Moro. I work in Crisis Management & Incident Response at Deloitte and actively contribute to digital forensics and blue team research within the Mntcrl laboratory. I gained hands-on experience in high-pressure cyber defense environments, including Locked Shields 2025 (NATO CCDCOE), where I worked on ICS and mobile forensics as part of a Blue Team that ranked 3rd worldwide. My technical focus includes memory forensics, malware analysis, and detection engineering, with hands-on experience developing a YARA extension for VolWeb (Volatility 3) as part of my Bachelor's thesis.

As part of the Mntcrl team, I participate in forensic CTF competitions and develop forensic challenges aimed at teaching investigative methodologies and technical skills. This website gathers my research, technical writeups, and challenge development work.

Experience

  • Cyber Incident Response Analyst 10-2025 - Present

    Deloitte · Bari, Italy

    Handling incidents through detection, containment, eradication, and recovery to minimise impact and restore normal operations. Conducting proactive threat hunting based on threat intelligence to identify emerging threats within the organisation’s perimeter; analysing key Tactics, Techniques, and Procedures (TTPs) used by threat actors to compromise victim infrastructure. Collecting and analysing digital evidence from various sources and performing eDiscovery activities to support investigations and incident management.

  • Digital Forensics Specialist - Locked Shields 2025 04-2025 - 05-2025

    NATO Cooperative Cyber Defence Centre of Excellence (CCDCOE) · Live exercise in Ljubljana, Slovenia

    Executed multi-domain digital forensics operations, including ICS/SCADA and mobile environments, as part of the world's largest and most complex live-fire cyber defence exercise. Collaborated cross-functionally with legal and CTI teams under extreme time pressure, contributing forensic evidence and threat intelligence within a realistic simulated international geopolitical crisis scenario.

  • Cyber Security Instructor 01-2025 - Present

    Cybersecurity National Lab · Bari, Italy

    Mentoring the University of Bari's cybersecurity team, guiding them in developing offensive and defensive skills through tailored exercises and strategic coaching.

  • Digital Forensics Researcher & CTF Player 11-2022 - Present

    Mntcrl · Bari, Italy

    Conducting research activities in Digital Forensics, with a focus on the analysis of digital evidence, incident reconstruction, memory forensics, and the identification of malicious artefacts to support cybersecurity investigations. Developing and evaluating defensive security techniques aimed at threat detection, anomaly identification, incident response, and the strengthening of organisational cyber resilience. Actively participating in Capture The Flag (CTF) competitions and military cybersecurity simulations, applying defensive methodologies in realistic adversarial scenarios to enhance technical expertise in cyber operations, threat analysis, and strategic decision-making.

Education

  • MSc in Cybersecurity 2025 - 2027

    University of Bari Aldo Moro

  • BSc in Computer Science 2022 - 2025

    University of Bari Aldo Moro

Focus areas

Memory forensicsDisk & filesystem analysisIncident responseWindows internalsLog & timeline analysisNetwork forensicsMalware triageThreat huntingCyber threat intelligenceOsintCTF challenge design