AI Drama in the Fiber World, Heads down in GCFA land, and I must BUILD!

AI landed in the Tour de Fleece world and all hell broke loose.

One single person posted a flier a while back that was AI generated, not trying to pass it off as their work, but just an ad for something. Folks were upset about it and shamed the poster pretty mercilessly, so the admins made a post about how they decided to allow genAI content but NOT allow anyone to say anything negative about it, or be removed. 

Obviously this was not well received. 

The entire group has devolved into anti AI sentiment. It's pretty disheartening. No-one is even posting AI, it's just the mod's stance that caused all the problems.

Anyway, I'm book 2 deep into GCFA. This is the challenge I was looking for! After 25 years of building products though, I cannot simply do the work as instructed without noticing room for improvement - and one of those areas is the spreadsheet they give you to track the investigation.

To elaborate a little, in FOR508, you investigate a single case through the entire course, and have labs where you uncover evidence, then track that evidence in a spreadsheet with multiple tabs.

I lasted to the first lab of book 2 with this process. I just can't. How to correlate findings across the same hosts or networks? How to add the commands or tools you ran for reproducibility? How to track the investigation of a single host or single IOC and see the path of logic your brain took? How to look back on what you already tried or identify gaps? What about outputs? Screenshots? This cannot be how investigations are done!

Well it probably isn't but I'll never pass up a chance to build something that suits my own needs perfectly. I present to you: Vera! https://github.com/nebulae/vera

I'll be building this out as I run through the course, then once I'm done (and the hackathon is over) I'll make it work with TRUDI and add VERA as another MCP tool in TRUDI's arsenal.