Skip to main content
Conference
Wed, Mar 25, 7:00 PM - 8:30 PM (UTC)

From the Trenches: What We Learned from 500k Hours of Incident Investigations

About this event

Join us for an exclusive practitioner luncheon revealing the findings drawn from over 500k+ hours of incident investigations in 2025. Dig into the insights and the stories behind the data of M-Trends 2026 through a panel discussion with Mandiant incident response experts.  RSAC Badge required.

Session & Panel Topics:

  • Compromising the virtualization stack
  • Exploiting edge devices and network appliances
  • The “Recovery Denial” tactics of modern extortion campaigns
  • SaaS integration abuse for data-theft and cross-cloud lateral movement
  • Accelerated ransomware handoffs
  • Multi-year espionage intrusions and their impact on forensics telemetry retention

Agenda:

  • 12:15 PM: Lunch is served
  • 12:30 PM: Report summary | Omar ElAhdan
  • 12:45 PM: Panel: From the trenches | Moderated by Matt Nichols, featuring Ethan Izenwasser, John Palmisano, and Omar ElAhdan
  • 1:15 PM: Interactive Q&A
Event details
In-person event
Wed, Mar 25, 7:00 PM - 8:30 PM (UTC)
Location
San Francisco Mariott Marquis, Lower Level B2, Salon 7, 780 Mission St. San Francisco, 94103