Yogesh Khatri
Director - Capability at CyberCX
Sydney, New South Wales, Australia
Summary
🤩
Rockstar🎓
Top SchoolYogesh Khatri is a veteran digital forensics and incident response leader with over two decades of experience investigating malware, IP theft, zero-days, DDoS, insider misuse and complex electronic crimes. Currently Director - Capability at CyberCX in Sydney, he blends hands-on reverse engineering and automation with strategic capability building, having served as a principal investigator, academic program director, and guest lecturer at UCLA. A certified expert (EnCE, GREM, GCIA, GPEN) and regular CEIC speaker since 2007, Yogesh also contributes widely to open-source DFIR tooling—most notably mac_apt and contributions to ALEAPP/iLEAPP—bringing practical artifact parsing improvements and NSKeyedArchive deserialization to the community. His profile combines deep technical rigor and research (swiftforensics.com) with proven leadership in training and incident response operations, and an uncommon knack for turning forensic artifacts into repeatable, automatable processes.
9 years of coding experience
14 years of employment as a software developer
Indian School BahrainMS Computer Engineering, MS Computer Engineering at Syracuse UniversityBE Electronics, BE Electronics at Sardar Patel College of Engineering, Mumbai University
Hindi, English, Gujarati
Github Skills (12)
file-handling10
macos10
ios10
sqlite10
data-parsing10
python10
protobuffer10
protobuf10
android9
terminal-application7
debugging7
terminal-emulator7
Programming languages (10)
Github contributions (5)
ydkhatri/mac_apt
Aug 2017 - Aug 2022
macOS (& ios) Artifact Parsing Tool
Role in this project:
Back-end Developer
Back-end DeveloperContributions:31 releases, 2 reviews, 522 commits in 5 years
Contributions summary:Yogesh primarily contributed to a macOS artifact parsing tool, focusing on core functionality and utility improvements. Their contributions include implementing a new plug-in for reading the history of terminal sessions and handling associated history files. Additionally, the user has worked on improving and refactoring existing plugins with bug fixes and improved output formatting.
iosmacosparsingdfirforensics
abrignoni/ALEAPP
Feb 2020 - Jan 2021
Android Logs Events And Protobuf Parser
Role in this project:Back-end Developer
Back-end DeveloperContributions:159 commits, 63 PRs, 29 pushes in 11 months
Contributions summary:Yogesh primarily focused on refactoring and bug fixes within the Android Logs Events And Protobuf Parser repository. Their work involved modifications to the `usagestats.py` script, including updates to protobuf parsing and file handling. The user also updated paths and made improvements to the `aleappGUI.py` and `scripts/report.py` files, indicating involvement in the tool's overall functionality and reporting capabilities. Additionally, the user contributed to the `recentactivity.py` and `smsmms.py` artifacts and to the overall code base.
android-logparserprotobuf
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.