Retired U.S. Secret Service veteran Steve Gemperle and retired FBI Supervisory Special Agent Jeff Rutherford will draw on real-world investigative experience to examine how modern threat actors operate, how their activity unfolds across enterprise environments, and what DFIR teams can learn from past cases. Through practical examples involving intrusions, fraud, data theft, and incident response challenges, this session will highlight the behaviors, artifacts, and investigative decisions that often determine whether an organization can quickly understand, contain, and recover from an attack. Attendees will leave with a clearer view of today’s DFIR threat landscape and how lessons from past investigations can strengthen future response.