Catalina Falo

I work as a freelancer for companies and individuals in the tech sector, undertaking projects related to data protection and exploitation. I particularly assist my clients in searching for data leaks on the dark web, analyzing their exposure on social networks, and in people research.

These missions are part of a global approach focused on automation and artificial intelligence, which I use to optimize processes, increase efficiency, and produce actionable results quickly.

For example, I developed an automated system to manage and send repetitive messages related to managing accommodation invitations, to simplify operations and reduce manual processing time.

Utilizing the Darktrace platform (autonomous AI) for network and behavioral anomaly detection.

Proactive monitoring of IT environments and early identification of cyber threats.

Analysis of potential data leaks (surface web and dark web).

Assessment of organizations' digital exposure (social networks, digital footprint, reputational risks).

Investigation and correlation of information on individuals or entities for security and intelligence purposes.

Implementation of AI-based automations for detection, alerting, and incident prioritization.

Interpretation of weak signals and transformation into operational recommendations.

Support for business and security teams in understanding risks and making decisions.

Contribution to the continuous improvement of cyber surveillance and incident response processes.

Developed and maintained the OSINT environment for the Institute. Supported the full cycle of cyber investigations including deep & darknet searches. Training on the usage of OSINT tools/infrastructure and investigations. Processed data according to the chain of custody and upholding the highest data protection standards set at the Institute. Maintained the highest forensic standards to: ○ Gather open-source intelligence, analyze forensic dumps and find IoCs (Indicator of Compromises) ○ Secure evidence so it cannot be tampered with ○ Apply proper data protection according to the Institute data classification scheme ○ Deal with sensitive cases ○ Follow electronic data trails to reveal links or communications between individuals or groups

followed evolving cyber operation tactics, techniques and procedures (TTPs), and followed their evolving capabilities Analysis of malware samples (static and dynamic) to uncover IOCS Collaborated with external partners