Ahmed Khlief
Incident Response Specialist at Kaspersky
Dubai, Dubai, United Arab Emirates
Summary
👤
Senior🎓
Top SchoolAhmed Khlief is an Incident Response Specialist based in Dubai with nine years of hands-on experience in DFIR, threat hunting, and red/ purple teaming across government and private sectors. He combines deep malware analysis, reverse engineering and secure programming with practical SIEM/XDR expertise (Splunk, Palo Alto XDR, Azure Sentinel) to lead compromise assessments, ransomware investigations and APT hunts. At Kaspersky and prior roles he has built automation and tooling to accelerate investigations and operationalize detections, including contributions to an open-source Ninja C2 project where he modernized Python3 support and integrated AMSI bypass techniques. Comfortable on both Linux and Windows platforms, Ahmed bridges networking, Red Hat administration and offensive operations to improve defenders’ visibility and response. Known for translating complex attack timelines into actionable remediation, he also publishes research and custom correlation rules to help SOCs detect emerging TTPs.
9 years of coding experience
1 year of employment as a software developer
Bachelor’s Degree, computer and network systems engineer, 3.36/4, Bachelor’s Degree, computer and network systems engineer, 3.36/4 at Al-Balqa Applied University
English, Arabic
Github Skills (5)
python10
flask-ask9
flask9
powershell8
security8
Programming languages (4)
Github contributions (5)
ahmedkhlief/Ninja
Mar 2020 - Sep 2022
Open source C2 server created for stealth red team operations
Role in this project:
Backend Developer
Backend DeveloperContributions:1 review, 84 commits, 3 PRs in 2 years 7 months
Contributions summary:Ahmed contributed to the development of the Ninja C2 server, specifically by adding Flask installation and fixing a loop issue within the core Python scripts. They also integrated new AMSI bypass techniques and updated the Mimikatz module. Furthermore, the user upgraded the server to Python3, demonstrating an effort to modernize the codebase and enhance functionality.
red-teamstealth
ahmedkhlief/APT-Hunter
Dec 2020 - Feb 2022
Contributions:8 releases, 3 reviews, 85 commits in 1 year 1 month
forensic-analysismovementsaptpurplehunting
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.