Tales from the Field: Complex Legal Issues Arising from Recent Incidents

In his talk, Charles Carmakal, Chief Technology Officer of Mandiant Consulting, will walk through multiple case studies and discuss the circumstances that created complex legal challenges with security investigations. He will discuss how legal counsel, corporate leaders, incident responders, and other stakeholders navigated these challenges.

Some recent cases that will be discussed include:

1. The mass exploitation of managed file transfer solutions, where data theft was suspected, but very difficult to prove through organic forensic evidence
2. Victim notifications by law enforcement covering intrusion activity that exceeded log retention windows
3. Data extortion by threat actors involving real data, but ambiguity as to where the data was actually stolen from (e.g. a vendor)

This session is applicable to all individuals concerned with preparing for and responding to cybersecurity incidents, including counsel, cybersecurity and corporate leadership, etc.