Guidance Software Releases Industry-First Proactive Endpoint Security Analytics Solution

  Guidance Software Releases Industry-First Proactive Endpoint Security
  Analytics Solution

                       EnCase^® Analytics Now Available

Business Wire

PASADENA, Calif. -- September 30, 2013

Guidance Software, Inc. (NASDAQ: GUID), the World Leader in Digital
Investigations™, today announced the company’s newest product EnCase®
Analytics is now generally available. EnCase Analytics exposes unknown and
difficult-to-detect threats by applying “big data” analytical techniques to
the reams of data generated by endpoint activity, producing a clear picture of
organization-wide security risk.

For the first time, IT security teams can take a proactive threat surveillance
posture by collecting and analyzing the activity across all
endpoints—including servers—on their network to reveal both external and
internal threats. EnCase Analytics reveals new threats, compromised accounts,
back-channel communications and processes that morph as they propagate
throughout a network and often bypass detection- and signature-based security

“IT operations and security staffs are often overwhelmed by the task of
monitoring and managing thousands of endpoint devices. Consequently, security
data collection and analysis from endpoints can be inadequate or even
nonexistent,” said Jon Oltsik, senior principal analyst for Enterprise
Strategy Group (ESG). “These teams need security monitoring and analytics
products offering comprehensive coverage, ease-of-use and automation to manage
the scale, mobility, and dynamic nature of endpoint devices.”

The initial release of EnCase Analytics has been deployed by multinational
healthcare, manufacturing and risk management organizations, each with
hundreds of thousands of endpoints. These organizations have used EnCase
Analytics to collect, correlate and analyze endpoint activity to uncover
potential security breaches. Through an intuitive graphical user interface,
which leverages market-leading data visualization technology, EnCase Analytics
provides a bird’s-eye view of a company’s security posture—no matter how large
or disparate the datasets may be—delivering unprecedented visibility into
endpoint activity.

EnCase Analytics enables IT security teams to visualize security problems that
would otherwise go undetected, such as:

  *Spotting compromised admin accounts (link): By analyzing the activity of
    end users logged in with administrator credentials, the interface shows
    activity across multiple domains by the same administrator account. Such
    activity points to the credentials having been compromised, which could
    lead to data theft or worse.
  *Pointing to advanced persistent threats (APTs) (link): While many security
    solutions highlight network traffic to countries where suspected hacking
    originates, EnCase Analytics lets the security administrator quickly see
    which processes and services are making requests to those countries. If a
    kernel service is connecting to one of these countries, this may be a
    serious problem and potential evidence of an APT attack.
  *Visualizing polymorphic malware (link): Few security solutions can spot
    malware that changes its name to avoid signature detection. EnCase
    Analytics shows the number of instances of a process and that number’s
    deviation from normal, as well as other processes that might have the same
    prevalence over a period of time. If there are similarities in the way
    multiple processes are acting across machines, it is clear, visual
    evidence of polymorphic malware.

“An effective IT security program now requires operating under the assumption
that the perimeter has been and will continue to be breached. Organizations
must implement proactive security measures, like systems that provide
visibility into anomalous behavior across all endpoints of the network,” said
Victor Limongelli, president and chief executive officer at Guidance Software.
“EnCase Analytics provides, for the first time, a clear picture of the
security posture of an organization so that they can proactively zero-in on
threats and minimize damage.”

Availability and Pricing

EnCase Analytics is available through the Guidance Software channel partner
network and directly from Guidance Software. For a limited time, Guidance
Software is offering attractive introductory pricing. Through the end of the
year, customers that buy both EnCase Analytics and EnCase® Cybersecurity—a
solution that facilitates real-time and on-demand incident response, as well
as sensitive data discovery—receive one of the solutions at no additional
cost. Special terms and conditions apply. Please contact Guidance Software for
more details.

About EnCase Analytics

EnCase Analytics is the security intelligence product designed to derive
insights from the data generated by endpoint activity. Instead of trusting a
potentially compromised operating system, EnCase Analytics leverages
kernel-level access for endpoint data collection—providing a repository of the
most reliable data for insights into undetected risks and threats. It also
enables users to quickly visualize endpoint data from multiple dimensions,
regardless of how large or disparate the data sets may be. Through its
interactive visual interface, EnCase Analytics exposes suspicious patterns,
commonalities, and anomalies, allowing for on-the-fly adjustments to zero-in
on the threats.

About Guidance Software, Inc.

Guidance Software is recognized worldwide as the industry leader in digital
investigative solutions. Its EnCase® Enterprise platform is used by numerous
government agencies, more than 65 percent of the Fortune 100, and more than 40
percent of the Fortune 500, to conduct digital investigations of servers,
laptops, desktops and mobile devices. Built on the EnCase Enterprise platform
are market-leading electronic discovery and cyber security solutions, EnCase
eDiscovery, EnCase Cybersecurity, and EnCase Analytics. They empower
organizations to respond to litigation discovery requests, perform sensitive
data discovery for compliance purposes, conduct speedy and thorough security
incident response, and reveal previously hidden advanced persistent threats or
malicious insider activity. For more information about Guidance Software,

EnCase®, EnScript®, FastBloc®, EnCE®, EnCEP®, Guidance Software™ and Tableau™
are registered trademarks or trademarks owned by Guidance Software in the
United States and other jurisdictions and may not be used without prior
written permission. All other trademarks and copyrights referenced in this
press release are the property of their respective owners.



Guidance Software
Brigitte Engel, 626-229-9191
Ross Levanto/Davida Dinerman
Press spacebar to pause and continue. Press esc to stop.