After the breach: Uncovering the full scope of the attack
You’ll learn how to:
- Uncover the scope of the attack by identifying affected systems, accounts, and data
- Support legal and insurance decisions by preserving evidence and documenting findings
- Protect customer trust by communicating what is known, what remains uncertain, and what the organization is doing
- Reduce the risk of further compromise by identifying overlooked access and persistence
Reserve Your Spot for Our Upcoming Webcast
After a breach, every major decision depends on knowing what happened. Who must be notified? What evidence will counsel and insurers need? What can you confidently tell customers? Could the attacker still have access?
A post-breach investigation provides the facts needed to address legal obligations, support insurance claims, protect customer trust, and reduce the risk of further compromise. Without those facts, an organization can underestimate both the attack and its consequences.
Join Exterro's Robert Bond and Dan Gugliotta as they follow a breach investigation that uncovers compromised systems and potential data theft beyond the initial alert. We'll see how investigators reconstruct attacker activity, assess data exposure, and identify gaps in remediation.
We'll also explain how you can turn technical findings into a defensible account that helps security, legal, and executive teams make decisions — and explain the evidence behind them.
Event Speakers
Dan Gugliotta is a Solutions Engineer specializing in digital forensics and incident response at Exterro. He helps investigative teams apply FTK and Exterro’s AI-powered forensic tools to collect, analyze, and preserve digital evidence. His work focuses on practical investigative workflows, endpoint investigations, and helping examiners turn complex data into clear, defensible findings.
Robert Bond leads product marketing for Exterro’s forensic solutions, including FTK and ARMOUR for FTK. His background spans digital forensics, cybersecurity, and enterprise technology, with previous roles at Hitachi Cyber, Guidance Software—the company behind EnCase—and Hewlett Packard. He focuses on how AI, automation, and forensic evidence help organizations investigate incidents, understand what happened, and respond with confidence. Robert holds an MBA from Indiana University and a bachelor’s degree from the University of Maryland.
Paul Asadoorian is currently the Principal Security Researcher for Eclypsium, focused on firmware and supply chain security awareness. Paul’s passion for firmware security extends back many years to the WRT54G hacking days and reverse engineering firmware on IoT devices for fun. Paul and his long-time podcast co-host Larry Pesce co-authored the book “WRTG54G Ultimate Hacking” in 2007, which fueled the firmware hacking fire even more. Paul has worked in technology and information security for over 20 years, holding various security and engineering roles in a lottery company, university, ISP, independent penetration tester, and security product companies such as Tenable. In 2005 Paul founded Security Weekly, a weekly podcast dedicated to hacking and information security. In 2020 Security Weekly was acquired by the Cyberrisk Alliance. Paul is still the host of one of the longest-running security podcasts, Paul’s Security Weekly, he enjoys coding in Python & telling everyone he uses Linux.