Guidance Software 10-Q 2010 Q3 Quarterly report

UNITED STATES

SECURITIES AND EXCHANGE COMMISSION

Washington, D.C. 20549

FORM 10-Q

xQUARTERLY REPORT PURSUANT TO SECTION 13 OR 15(d) OF THE SECURITIES EXCHANGE ACT OF 1934

FOR THE QUARTERLY PERIOD ENDED SEPTEMBER 30, 2010

OR

oTRANSITION REPORT PURSUANT TO SECTION 13 OR 15(d) OF THE SECURITIES EXCHANGE ACT OF 1934

For the transition period from                      to                    

Commission File Number 001-33197

GUIDANCE SOFTWARE, INC.

(Exact name of registrant as specified in its charter)

Delaware	95-4661210
(State or other jurisdiction of incorporation or organization)	(I.R.S. Employer Identification No.)

215 North Marengo Avenue Pasadena, California 91101	(626) 229-9191
(Address of principal executive offices)	Registrant’s telephone number, including area code

Securities registered pursuant to Section 12(b) of the Act:

Common Stock, $0.001 par value per share.

Securities registered pursuant to Section 12(g) of the Act:

None.

Indicate by check mark whether the registrant: (1) has filed all reports required to be filed by Section 13 or 15(d) of the Securities Exchange Act of 1934 during the preceding 12 months (or for such shorter period that the registrant was required to file such reports), and (2) has been subject to such filing requirements for the past 90 days.  Yes x  No  o

Indicate by check mark whether the registrant has submitted electronically and posted on its corporate Web site, if any, every Interactive Data File required to be submitted and posted pursuant to Rule 405 of Regulation S-T (232.405 of this chapter) during the preceding 12 months (or for such shorter period that the registrant was required to submit and post such files).  Yes o  No o

Indicate by check mark whether the registrant is a large accelerated filer, an accelerated filer, a non-accelerated filer or a smaller reporting company. See the definitions of “large accelerated filer,” “accelerated filer,” “non-accelerated filer” and “smaller reporting company” in Rule 12b-2 of the Exchange Act.

Large accelerated filer  o	Accelerated filer  o
Non- accelerated filer  x	Smaller reporting company  o

Indicate by check mark whether the registrant is a shell company (as defined in Rule 12b-2 of the Exchange Act).  Yes o  No x

As of November 9, 2010, there were approximately 24,605,000 shares of the registrant’s Common Stock outstanding.

GUIDANCE SOFTWARE, INC.

FORM 10-Q

FOR THE QUARTERLY PERIOD ENDED SEPTEMBER 30, 2010

Table of Contents

		Page
PART I - FINANCIAL INFORMATION
Item 1.	Financial Statements (Unaudited)
	Condensed Consolidated Balance Sheets at September 30, 2010 and December 31, 2009	1
	Condensed Consolidated Statements of Operations for the three and nine months ended September 30, 2010 and 2009	2
	Condensed Consolidated Statements of Cash Flows for the nine months ended September 30, 2010 and 2009	3
	Notes to the Condensed Consolidated Financial Statements	4
Item 2.	Management’s Discussion and Analysis of Financial Condition and Results of Operations	14
Item 3.	Quantitative and Qualitative Disclosures About Market Risk	22
Item 4.	Controls and Procedures	22
PART II - OTHER INFORMATION
Item 1.	Legal Proceedings	22
Item 1A.	Risk Factors	22
Item 2.	Unregistered Sales of Equity Securities and Use of Proceeds	22
Item 3.	Defaults upon Senior Securities	23
Item 4.	Reserved	23
Item 5.	Other Information	23
Item 6.	Exhibits	23
Signature		24

PART I. FINANCIAL INFORMATION

Item  1.Financial Statements

GUIDANCE SOFTWARE, INC.

CONDENSED CONSOLIDATED BALANCE SHEETS

(in thousands, except share and per share data)

(unaudited)

	September 30, 2010			December 31, 2009
ASSETS
Current assets:
Cash and cash equivalents	$	21,780		$	36,585
Trade receivables, net of allowance for doubtful accounts of $624 and $1,000, respectively	19,045			16,932
Inventory	1,070			275
Prepaid expenses and other current assets	2,250			1,958
Total current assets	44,145			55,750
Long-term assets:
Property and equipment, net	11,880			12,835
Intangible assets, net	5,331			—
Goodwill, net	3,711			—
Other assets	434			434
Total long-term assets	21,356			13,269
Total assets	$	65,501		$	69,019
LIABILITIES AND STOCKHOLDERS’ EQUITY
Current liabilities:
Accounts payable	$	2,543		$	3,226
Accrued liabilities	5,935			4,143
Capital lease obligations	59			75
Deferred revenues	30,227			32,336
Total current liabilities	38,764			39,780
Long-term liabilities:
Rent incentives	1,403			1,929
Capital lease obligations	75			96
Deferred revenues	3,400			3,752
Total long-term liabilities	4,878			5,777
Commitments and Contingencies — See Note 12
Stockholders’ equity:
Preferred stock, $0.001 par value: 10,000,000 shares authorized; no shares issued or outstanding	—			—
Common stock, $0.001 par value; 100,000,000 shares authorized; 23,726,000 and 23,506,000 shares issued, respectively; and 22,884,000 and 22,975,000 shares outstanding, respectively	23			23
Additional paid-in capital	66,864			62,683
Treasury stock, at cost, 842,000 and 531,000 shares, respectively	(3,708		)	(2,080		)
Accumulated deficit	(41,320		)	(37,164		)
Total stockholders’ equity	21,859			23,462
Total liabilities and stockholders’ equity	$	65,501		$	69,019

The accompanying notes are an integral part of these consolidated financial statements

1

GUIDANCE SOFTWARE, INC.

CONDENSED CONSOLIDATED STATEMENTS OF OPERATIONS

(in thousands, except per share data)

(unaudited)

	Three Months Ended September 30,						Nine Months Ended September 30,
	2010			2009			2010			2009
Revenues:
Product revenue	$	11,908		$	8,489		$	31,585		$	23,834
Services and maintenance revenue	11,939			10,523			34,363			30,266
Total revenues	23,847			19,012			65,948			54,100
Cost of revenues:
Cost of product revenue	1,513			641			3,273			1,974
Cost of services and maintenance revenue	4,924			4,282			14,093			13,548
Total cost of revenues	6,437			4,923			17,366			15,522
Gross profit	17,410			14,089			48,582			38,578
Operating expenses:
Selling and marketing	8,955			8,507			26,240			27,388
Research and development	4,432			3,363			12,614			10,597
General and administrative	3,544			3,331			10,391			10,580
Depreciation and amortization	1,250			1,097			3,468			3,358
Total operating expenses	18,181			16,298			52,713			51,923
Operating loss	(771		)	(2,209		)	(4,131		)	(13,345		)
Other income and expense:
Interest income	12			27			69			57
Interest expense	(1		)	(2		)	(4		)	(8		)
Other income, net	1			18			—			27
Total other income and expense	12			43			65			76
Loss before income taxes	(759		)	(2,166		)	(4,066		)	(13,269		)
Income tax provision	4			(1		)	90			85
Net loss	$	(763	)	$	(2,165	)	$	(4,156	)	$	(13,354	)
Net loss per share:
Basic	$	(0.03	)	$	(0.09	)	$	(0.18	)	$	(0.58	)
Diluted	$	(0.03	)	$	(0.09	)	$	(0.18	)	$	(0.58	)
Weighted average number of shares used in per share calculation:
Basic	23,036			22,917			23,048			23,137
Diluted	23,036			22,917			23,048			23,137

The accompanying notes are an integral part of these consolidated financial statements

2

GUIDANCE SOFTWARE, INC.

CONDENSED CONSOLIDATED STATEMENTS OF CASH FLOWS

(in thousands)

(unaudited)

	Nine Months Ended September 30,
	2010			2009
Operating Activities:
Net loss	$	(4,156	)	$	(13,354	)
Adjustments to reconcile net loss to net cash used in operating activities:
Depreciation and amortization	3,468			3,358
Benefit for doubtful accounts	(48		)	(102		)
Share-based compensation	3,885			4,717
Loss on disposal of assets	1			—
Changes in operating assets and liabilities:
Trade receivables	(1,542		)	4,628
Prepaid expenses, inventory and other assets	(358		)	60
Accounts payable	(810		)	(1,441		)
Accrued liabilities	1,213			(591		)
Deferred revenues	(2,461		)	434
Net cash used in operating activities	(808		)	(2,291		)
Investing Activities:
Purchase of property and equipment	(1,917		)	(1,738		)
Acquisition, net of cash acquired	(10,686		)	—
Net cash used in investing activities	(12,603		)	(1,738		)
Financing Activities:
Proceeds from the exercise of stock options	296			—
Common stock repurchased or withheld	(1,628		)	(1,603		)
Principal payments on capital lease obligations	(62		)	(137		)
Net cash used in financing activities	(1,394		)	(1,740		)
Net decrease in cash and cash equivalents	(14,805		)	(5,769		)
Cash and cash equivalents, beginning of period	36,585			36,006
Cash and cash equivalents, end of period	$	21,780		$	30,237
Supplemental disclosures of cash flow information:
Net cash paid during the period for:
Interest	$	2		$	5
Income taxes	$	56		$	234
Non-cash activities:
Capital lease obligations incurred to acquire assets	$	26		$	40
Purchase of equipment included in accounts payable and accrued expenses	$	162		$	167

The accompanying notes are an integral part of these consolidated financial statements

3

GUIDANCE SOFTWARE, INC.

NOTES TO CONDENSED CONSOLIDATED FINANCIAL STATEMENTS

(unaudited)

Note 1. Description of the Business

General

Guidance Software, Inc. was incorporated in the state of California in 1997 and reincorporated in Delaware on December 11, 2006. Guidance and its subsidiaries are collectively referred to herein as “Guidance,” “we” or the “Company.” Headquartered in Pasadena, California, Guidance is the leading global provider of software and hardware solutions used to conduct digital investigations.

Our main products are: EnCase® eDiscovery, which automates the search, collection preservation and processing of electronically stored information for litigation and compliance purposes; EnCase® Enterprise, a comprehensive, network-enabled digital investigative solution that enables corporations and government agencies to search, collect, preserve and analyze data across all of the servers, desktops and laptops that comprise their entire network from a single location; EnCase® Forensic, a desktop-based product primarily used by law enforcement and government agencies for collecting, preserving, analyzing and authenticating electronic computer forensic data for use in criminal and civil court proceedings; and EnCase® Legal Hold, which automates the sending and tracking of litigation hold notices, and provides online interviewing capabilities. In 2009, we launched EnCase® Portable, a data acquisition solution that enables customers to leverage the search and acquisition capabilities of EnCase® software in a wide range of field applications through the use of a portable device and EnCase® Cybersecurity, which provides the ability to identify and analyze undiscovered threats, such as polymorphic or metamorphic malware, and other advanced hacking techniques that evade traditional network or host-based defenses and include investigative capabilities that target confidential or sensitive data and risk mitigation by wiping sensitive data from unauthorized locations. In May 2010, we added a family of data acquisition forensic hardware products including forensic duplicators, multiple write blockers and other hardware through our acquisition of Tableau, LLC (“Tableau”). In addition, we complement our software offerings with a comprehensive array of professional and training services including technical support and maintenance services to help our customers implement our solutions, conduct investigations and train their IT and legal professionals to effectively and efficiently use our software products.

Note 2. Summary of Significant Accounting Policies

Basis of Presentation

The accompanying interim condensed consolidated financial statements are unaudited. The balance sheet as of December 31, 2009 has been derived from our audited consolidated financial statements. These statements should be read in conjunction with the audited consolidated financial statements and related notes, together with management’s discussion and analysis of financial position and results of operations, contained in our Annual Report on Form 10-K for the year ended December 31, 2009, filed with the United States Securities and Exchange Commission (the “SEC”) on February 26, 2010. The operating results for the three-month and nine-month periods ended September 30, 2010 and cash flows for the nine months period ended September 30, 2010 are not necessarily indicative of the results that will be achieved for the full fiscal year or for future periods.

The accompanying condensed consolidated financial statements have been prepared in accordance with accounting principles generally accepted in the United States, or (“GAAP”) and pursuant to the rules and regulations of the SEC for interim financial reporting. In the opinion of our management, the unaudited condensed consolidated financial statements have been prepared on the same basis as the audited consolidated financial statements in the Annual Report on Form 10-K for the year ended December 31, 2009 and include all adjustments necessary for the fair presentation of our financial position as of September 30, 2010 and our results of operations and cash flows for the periods ended September 30, 2010 and 2009. The condensed consolidated balance sheet as of December 31, 2009 has been derived from the December 31, 2009 audited financial statements. The interim financial information contained in this Quarterly Report is not necessarily indicative of the results to be expected for any other interim period or for the entire year.

The consolidated financial statements include the accounts of Guidance and its wholly owned subsidiaries. All significant intercompany accounts and transactions have been eliminated.

4

Prior Period Adjustment

The Company recorded out-of-period adjustments for the three and nine months ended September 30, 2010 which decreased the net loss and the deferred revenue balance by $531,000. The adjustments relate to deferred revenue of $408,000 and bad debt recoveries of $123,000 that should have been recognized in income in prior periods.  Had the Company recorded these adjustments in the appropriate periods net loss for 2009, 2008, and 2007 would have been reduced by $23,000, $167,000, $145,000, respectively, and the opening accumulated deficit as of January 1, 2007 would have been reduced by $196,000.

The Company and the Audit Committee have determined that these adjustments are not material to the prior periods, the trend of earnings, and the expected annual 2010 consolidated financial statements.

Use of Estimates and Assumptions

The preparation of financial statements in conformity with generally accepted accounting principles requires management to make estimates and judgments that affect the reported amounts of assets, liabilities, revenues and expenses, and related disclosure of contingent assets and liabilities. On an ongoing basis, we evaluate these estimates, including those related to revenue recognition, share-based compensation, bad debts, income taxes, commitments, contingencies and litigation. We base our estimates on historical experience and on various other assumptions that are believed to be reasonable under the circumstances. Actual results may differ from these estimates.

Cash and Cash Equivalents

We invest excess cash in money market funds and highly liquid debt instruments of the US government and its agencies. Highly liquid investments with stated maturities of three months or less from date of purchase are classified as cash and cash equivalents.

Fair Value of Financial Instruments

The carrying value of certain financial instrument, including cash and cash equivalents, accounts receivable and accounts payable, approximate fair value based on their short-term nature. Based on borrowing rates currently available to us for borrowings with similar terms, the carrying values of our capital lease obligations also approximate fair value.

Inventory

Inventory is comprised of hardware and packaged software components and finished goods and is valued at the lower of cost or market, using the first-in first-out method.

Amortization of Intangible Assets with Finite Lives

Intangible assets with finite lives are carried at the implied fair value of such assets at the time of acquisition.  With the exception of our customer relationships intangible asset, which is amortized on a double-declining basis, the implied fair values of such assets are amortized on a straight-line basis over the estimated useful lives.

Goodwill and Indefinite-Lived Intangibles

Goodwill represents the excess of purchase price over fair value of net assets acquired and is assigned to a reporting unit at the date the goodwill is initially recorded. Goodwill and indefinite-lived intangible assets are not amortized but evaluated for impairment annually, or whenever events or changes in circumstances indicate that the value may not be recoverable. A two-step test is performed at the reporting unit level to assess goodwill for impairment. First, the fair value of the reporting unit is compared to its carrying value. If the fair value exceeds the carrying value, the reporting unit is not impaired and no further testing is performed. The second step is performed if the carrying value exceeds the fair value. If the carrying amount of the reporting unit goodwill exceeds its implied fair value, an impairment loss equal to the difference will be recorded. Indefinite-lived intangibles are assessed for impairment by comparing the carrying value of the assets with their fair values. If the carrying amounts of the indefinite-lived intangible assets exceed their implied fair value, an impairment loss equal to the difference will be recorded.

Application of the impairment test requires significant judgment to estimate the fair value. Changes in estimates and assumptions could materially affect the determination of fair value and/or impairment.

5

Concentrations of Credit Risk

Financial instruments that potentially subject us to significant concentrations of credit risk consist primarily of cash and cash equivalents and accounts receivable. We restrict our investments in cash and cash equivalents to financial institutions, US government or federal agency instruments and obligations of corporations with high credit standing. At September 30, 2010, the majority of our cash balances were held at financial institutions located in California in accounts that are insured by the Federal Deposit Insurance Corporation for up to $250,000. Uninsured balances aggregate approximately $20.6 million as of September 30, 2010. At September 30, 2010, all of our cash equivalents consisted of financial institution and US governmental debt obligations. We periodically perform credit evaluations of our customers and maintain reserves for potential losses on our accounts receivable. We do not believe we are subject to concentrations of credit risk with respect to such receivables.

Recent Accounting Pronouncements

Revenue Recognition (Accounting Standards Codification (ASC) 605): In October 2009, an update was made to Revenue Recognition—“Multiple-Deliverable Revenue Arrangements—a consensus of the FASB Emerging Issues Task Force” and the corresponding Software—“Certain Revenue Arrangements That Include Software Elements—a consensus of the FASB Emerging Issues Task Force.” The update to Revenue Recognition removes the objective-and-reliable-evidence-of-fair-value criterion, replaces references to “fair value” with “selling price,” provides a hierarchy that entities must use to estimate the selling price, eliminates the use of the residual method for allocation and expands the ongoing disclosure requirements. The Software update changes the accounting model for revenue arrangements and provides guidance on how a vendor should allocate arrangement consideration to deliverables that includes both tangible products and software. Effective prospectively for revenue arrangements entered into or materially modified in fiscal years beginning on or after June 15, 2010, we have adopted these standards with no material impact on our consolidated financial statements.

Compensation- Stock Compensation (ASC 718): In April 2010, the FASB issued an update to Compensation-Stock Compensation. The update clarifies that an employee share-based payment award with an exercise price denominated in the currency of a market in which a substantial portion of the entity’s equity shares trades should not be considered to contain a condition that is not a market, performance or service condition. Therefore, an entity would not classify such an award as a liability if the award otherwise qualifies as equity.  The standard is effective for interim and annual periods ending after December 15, 2010 and should be applied prospectively. The adoption of this standard is not expected to have a material impact on our consolidated financial statements.

Revenue Recognition (ASC 605): In April 2010, an update was made to Revenue Recognition - “Milestone Method of Revenue Recognition.” The update to Revenue Recognition provides guidance on defining a milestone and determining when it may be appropriate to apply the milestone method of revenue recognition for research or development transactions. Consideration that is contingent on achievement of a milestone in its entirety may be recognized as revenue in the period in which the milestone is achieved only if the milestone is judged to meet certain criteria to be considered substantive. Effective prospectively for milestones achieved in fiscal year and interim periods beginning on or after June 15, 2010, we have adopted this standard with no material impact on our consolidated financial statements.

Note 3. Business Combination

On May 7, 2010, we acquired substantially all of the assets of Tableau, a privately-held developer and manufacturer of computer forensic products for approximately $10.7 million in cash (net of cash acquired of $1.6 million). We incurred $0.2 million in acquisition-related costs. We acquired Tableau to extend our existing leadership in computer forensics technology by offering software and hardware to better fulfill the needs of the computer forensic community. This transaction closed on May 7, 2010 and the results of operations of Tableau have been included in the Company’s consolidated financial statements subsequent to the date of acquisition. For the three and nine months ended September 30, 2010, product revenues included $2.0 million and $2.9 million, respectively, of revenue from Tableau.

Based upon the estimated fair values as of May 7, 2010, we made an allocation of the purchase price to the net tangible and intangible assets acquired. The excess of the purchase price over the estimated fair values of the underlying net tangible and intangible assets has been recorded as goodwill. The factors that contributed to the recognition of goodwill included intangible assets acquired that do not qualify for separate recognition and expected synergies that will increase revenue and profits.

The following are pro forma condensed consolidated financial statements of the combined entity as though the business combination had been as of the beginning of our annual reporting period and as of the beginning of the comparable annual reporting period (in thousands, except per share amounts):

	Three Months Ended September 30,						Nine Months Ended September 30,
	2010			2009			2010			2009
Total revenues	$	23,847		$	20,792		$	68,182		$	58,657
Total net expenses	24,606			22,473			71,929			70,620
Loss before income taxes	(759		)	(1,681		)	(3,747		)	(11,963		)
Income tax provision	4			(1		)	90			85
Net loss	$	(763	)	$	(1,680	)	$	(3,837	)	$	(12,048	)
Net loss per share — basic and diluted	$	(0.03	)	$	(0.07	)	$	(0.17	)	$	(0.52	)

6

Note 4. Net Loss Per Share

Basic net loss per common share is calculated by dividing net loss by the weighted average number of common shares outstanding during the reporting period. Diluted net loss per share is calculated based on the weighted average number of common shares and dilutive potential common shares outstanding during the period. Dilutive potential common shares consist of the shares issuable upon the exercise of stock options and upon the vesting of restricted stock awards under the treasury stock method. In net loss periods, basic net loss per share and diluted net loss per share are identical since the effect of potential common shares is anti-dilutive and therefore excluded.

The following table sets forth the computation of basic and diluted net loss per share (in thousands, except per share amounts):

	Three Months Ended September 30,						Nine Months Ended September 30,
	2010			2009			2010			2009
Numerator:
Net loss	$	(763	)	$	(2,165	)	$	(4,156	)	$	(13,354	)
Denominator:
Basic weighted average shares outstanding	23,036			22,917			23,048			23,137
Effect of dilutive stock options and non-vested share awards	—			—			—			—
Diluted weighted average shares outstanding	23,036			22,917			23,048			23,137
Net loss per share:
Basic	$	(0.03	)	$	(0.09	)	$	(0.18	)	$	(0.58	)
Diluted	$	(0.03	)	$	(0.09	)	$	(0.18	)	$	(0.58	)

Antidilutive securities, which consist of stock options and restricted stock awards that are not included in the diluted net loss per share calculation, consisted of an aggregate of approximately 5,469,000 and 4,929,000 shares as of September 30, 2010 and 2009, respectively.

Note 5. Share Repurchase Program

In August 2008, our Board of Directors authorized a program to repurchase shares of our common stock having an aggregate value of up to $8.0 million. As of September 30, 2010, we had approximately $4.8 million remaining under this authorization. The authorization allows us to repurchase our common stock from time to time through open market purchases and negotiated transactions, or otherwise. The timing, nature and amount of such transactions will depend on a variety of factors, including market conditions, and the program may be suspended, discontinued or accelerated at any time. The sources of funds for the purchases under the remaining authorization are our existing cash on hand and cash from operations. Purchases are made in the open market, through block trades and other negotiated transactions. Repurchased shares are held in Treasury Stock and have not been retired.

In addition to the repurchased shares, we withheld approximately 5,000 and 44,000 common shares for the three and nine months ended September 30, 2010, respectively, from employees to satisfy their personal income tax withholding requirements upon the vesting of restricted stock awards issued under our equity compensation plans. We may engage in similar transactions from time to time related to future vesting of employee restricted stock awards. See Part II. Item 2 of this Quarterly Report for further information regarding the share repurchase program.

Note 6. Fair Value Measurements

We adopted Fair Value Measurements and Disclosures (ASC 820) effective January 1, 2008 for financial assets and liabilities measured at fair value on a recurring basis. There was no impact upon the adoption to the consolidated financial statements. Fair Value Measurements and Disclosures requires disclosure that establishes a framework for measuring fair value and expands disclosure about fair value measurements. Under this standard, fair value is defined as the price that would be received in exchange for selling an asset or paid to transfer a liability (i.e., the “exit price”) in an orderly transaction between market participants at the measurement date. Fair Value Measurements and Disclosures establishes a hierarchy for inputs used in measuring fair value that minimizes the use of unobservable inputs by requiring the use of observable market data when available. Observable inputs are inputs that market participants would use in pricing the asset or liability based on active market data. Unobservable inputs would be inputs that reflect our assumptions about the assumptions market participants would use in pricing the asset or liability based on the best information available in the circumstances. The statement requires fair value measurements be classified and disclosed in one of the following three categories:

Level 1:	Unadjusted quoted prices in active markets that are accessible at the measurement date for identical, unrestricted assets and liabilities.
Level 2:	Quoted prices in markets that are not active or financial instruments for which all significant inputs are observable, either directly or indirectly, and corroborated by market data.
Level 3:	Prices or valuations that require inputs that are both significant to the fair value measurement and unobservable.

7

The following table sets forth, by level within the fair value hierarchy, financial assets (we have no financial liabilities) that are accounted for at fair value on a recurring basis as of September 30, 2010 and December 31, 2009 (in thousands):

	Fair Value Measurements at September 30, 2010
	Total		Level 1		Level 2		Level 3
Cash equivalents:
US Treasury Securities	$	8,999	$	8,999	$	—	$	—
Money market account	6,580		6,580		—		—
Total cash equivalents	$	15,579	$	15,579	$	—	$	—

	Fair Value Measurements at December 31, 2009
	Total		Level 1		Level 2		Level 3
Cash equivalents:
US Treasury Securities	$	5,000	$	5,000	$	—	$	—
Money market account	25,525		25,525		—		—
Total cash equivalents	$	30,525	$	30,525	$	—	$	—

Note 7. Goodwill and Other Intangibles

We assess goodwill and indefinite-lived intangible assets for impairment annually as of April 30, or more frequently if circumstances indicate impairment may have occurred. There were no impairment charges related to goodwill or indefinite-lived intangible assets as of September 30, 2010. Goodwill is assigned to our products reporting segment and we expect the full balance of goodwill to be tax deductible for tax purposes. In-process research and development intangible assets acquired are considered to be indefinite-lived until completion or abandonment of the associated research and development efforts. The Company will determine the estimated useful lives and amortization method of the asset upon completion of the research and development efforts. During the period the assets are considered infinite-lived, impairment will be assessed annually or whenever events or changes in circumstances indicate that their carrying value may not be recoverable.

The following table summarizes goodwill and indefinite-lived intangible assets information (in thousands):

Balance at March 31, 2010		Goodwill Acquired		In-process research and development		Balance atSeptember 30, 2010
$	—	$	3,711	$	1,100	$	4,811

During the second quarter of 2010, the Company acquired substantially all of the assets of Tableau resulting in acquired intangible assets. With the exception of customer relationships, which is amortized on a double-declining basis, the acquired intangible assets are being amortized over their estimated useful life as noted in Note 3 above.

The following table summarizes cumulative amortization expense related to intangible assets as of September 30, 2010 (in thousands):

	Nine Months EndedSeptember 30, 2010
	GrossCosts		Accumulated Amortization			Net
Core technology	$	1,100	$	(44	)	$	1,056
Existing and developed technology	1,200		(239		)	961
Customer relationships	575		(89		)	486
Trade names	1,800		(72		)	1,728
Total	$	4,675	$	(444	)	$	4,231

8

The following table summarizes the estimated remaining amortization expense through the year 2014 and thereafter (in thousands):

Year ending	Amortization Expense
2010	$	270
2011	1,036
2012	599
2013	373
2014	373
Thereafter	1,580
Total amortization expense	$	4,231

Note 8. Debt Obligations

We maintain a $3.0 million revolving line of credit with a bank. Borrowings under this line of credit would be collateralized by substantially all our assets. The line of credit requires that we remain in compliance with certain financial covenants, and at June 30, 2009, we were in breach of the covenant that prohibited a cumulative net loss (excluding non-cash share-based compensation) in excess of $4.0 million during any one fiscal year. In July 2009, we executed an amendment to the credit agreement with our bank, which increased the maximum allowable cumulative net loss under the covenant to $9.0 million (excluding non-cash share-based compensation) for the remainder of the 2009 fiscal year, and $4.0 million for any subsequent fiscal quarter. The amendment also included a waiver of this covenant for the period ended June 30, 2009. Borrowings under the amended credit agreement bear interest at one of the following rates (as selected by us): a rate equal to the bank’s alternate base rate plus 2% or the bank’s LIBOR plus 3%. In March 2010, an amendment to the credit agreement was entered into to extend the expiration date to May 31, 2012 and decrease the maximum cumulative net loss permitted under the credit facility to $5.0 million (excluding non-cash share-based compensation) during any one fiscal year.

As of September 30, 2010, we were in compliance with the covenants associated with the revolving line of credit. There were no amounts outstanding under this line of credit at September 30, 2010 or December 31, 2009.

Note 9. Equity Incentive Plan

In 2004, our Board of Directors and stockholders approved the 2004 Equity Incentive Plan (the “Plan”). A total of 2,062,000 shares of common stock was initially authorized and reserved for issuance under the Plan in the form of incentive and non-qualified stock options and stock purchase rights for restricted stock. The Plan was amended in 2005 to increase the number of shares available for issuance to 3,977,000. In May 2006, the Board of Directors and stockholders approved the First Amended and Restated 2004 Equity Incentive Plan (the “First Amended and Restated Plan”), which amended and restated the Plan in its entirety, and provided for increases in the number of shares available for issuance by an additional 1,126,994 shares on May 3, 2006, and an additional 828,073 shares on January 1, 2007, and an additional 828,123 shares on each of January 1, 2008 and 2009. At our 2008 Annual Meeting of Stockholders, our stockholders approved an amendment to the First Amended and Restated Plan that accelerated to July 1, 2008 the automatic increase in the number of shares available under the plan that was scheduled to occur on January 1, 2009.  Employees, officers and directors are eligible to receive awards under the Second Amended and Restated Plan, which is generally administered by the Compensation Committee of the Board of Directors, who determines the terms and conditions of each grant.

On April 22, 2010 at our 2010 Annual Meeting of Stockholders, our stockholders approved the Second Amended and Restated 2004 Equity Incentive Plan (the “Second Amended and Restated Plan”), which amended and restated the First Amended and Restated Plan in its entirety, and provided for an increase in the number of shares available for issuance by an additional 1,500,000 shares to a total of 9,088,313 shares. On April 22, 2010, the Board of Directors approved an amendment to the Second Amended and Restated Plan that accelerated the vesting of new grants of annual restricted stock awards granted to independent directors to occur on the earlier of the Company’s next annual meeting of stockholders following the grant date or the first anniversary of the grant date, subject to the independent director’s continued status as a service provider through such date.

At September 30, 2010, approximately 1,699,000 shares remain available for grant as stock options or restricted stock awards under the Second Amended and Restated Plan.

9

Stock Options

The terms of the stock options granted are determined at the time of grant, and generally vest 25% annually over a four-year service period and typically must be exercised within 10 years from the date of grant.

A summary of stock options activity for the nine months ended September 30, 2010 follows:

	Number of Options		Weighted Average Exercise Price		Weighted Average Remaining Contractual Term (in years)	Aggregate Intrinsic Value
Outstanding, December 31, 2009	3,785,000		$	8.67	6.7	$	1,237,000
Granted	327,000		$	5.37
Exercised	(66,000	)	$	4.47
Forfeited or expired	(322,000	)	$	9.66
Outstanding, September 30, 2010	3,724,000		$	8.37		$	2,073,000
Exercisable, September 30, 2010	2,291,000		$	7.63		$	1,434,000

We define in-the-money options at September 30, 2010 as options that had exercise prices that were lower than the $5.84 fair market value of our common stock at that date. The aggregate intrinsic value of options outstanding at September 30, 2010 is calculated as the difference between the exercise price of the underlying options and the fair market value of our common stock for the 1,582,000 shares that were in-the-money at that date, of which 1,126,000 were exercisable.

Restricted Stock Awards

During 2007, we began issuing restricted stock awards to certain directors, officers and employees. Compensation expense for such awards, based on the fair market value of the awards on the grant date, is recorded during the vesting period. Restricted stock awards generally vest 25% annually over a four-year service period.

A summary of restricted stock awards activity for the nine months ended September 30, 2010 follows:

	Number of Shares		Weighted Average Fair Value
Outstanding, December 31, 2009	1,043,000		$	7.27
Granted	993,000		5.60
Vested	(153,000	)	6.10
Forfeited	(138,000	)	6.79
Outstanding, September 30, 2010	1,745,000		$	6.47

The total grant date fair value of shares vested under such grants during the nine months ended September 30, 2010 was $933,000.

Note 10. Share-Based Compensation

Effective January 1, 2006, we adopted Compensation-Stock Compensation (ASC 718). Prior to the adoption of Compensation-Stock Compensation, we used the minimum-value method afforded by the Compensation-Stock Compensation for disclosure purposes. Since all options granted prior to January 1, 2006 were granted at exercise prices that were equal to the fair market value of the underlying stock on the date of the grant, no share-based compensation for stock options was recorded in the accompanying financial statements prior to 2006 and we are not required to record compensation expense for stock options granted prior to January 1, 2006 unless the terms of those options are subsequently modified. Since adoption, we recognize share-based compensation expense for all share-based awards granted after January 1, 2006 using the prospective transition method. Under that transition method, results for prior periods have not been restated.

10

With the exception of one grant issued in December 2007 with market-based vesting conditions, discussed further below, the fair values of awards granted were estimated at the date of grant using the Black-Scholes option pricing model and the following weighted average assumptions:

	Three Months Ended September 30,						Nine Months Ended September 30,
	2010			2009			2010			2009
Risk-free interest rate	2.1		%	3.0		%	2.9		%	2.2		%
Dividend yield	—		%	—		%	—		%	—		%
Expected life (years)	6.25			6.25			6.25			6.25
Volatility	68.6		%	57.9		%	56.2		%	61.4		%
Weighted average grant date fair value	$	3.07		$	2.21		$	3.04		$	2.32

The volatility of our common stock is estimated at the date of grant based on a weighted-average of the implied volatility of publicly traded 30-day to 270-day options on the common stock of a select peer group of similar companies (“Similar Companies”), the historical volatility of the common stock of Similar Companies and, beginning in late 2007, the historical volatility of our common stock. The risk-free interest rate that was used in the Black-Scholes option valuation model is based on the implied yield in effect at the time of each option grant, based on US Treasury zero-coupon issues with equivalent remaining terms. We use an expected dividend yield of zero in the Black-Scholes option valuation model, as we have no intention of paying any cash dividends on our common stock in the foreseeable future. Compensation-Stock Compensation requires us to estimate forfeitures at the time of grant and revise those estimates in subsequent periods if actual forfeitures differ from those estimates. We use historical data to estimate pre-vesting option forfeitures and record share-based compensation expense only for those awards that are expected to vest. We amortize share-based compensation on a straight-line basis over the requisite service period of the awards, which is generally the vesting period. The expected term (life) of all stock option awards has been calculated using the “simplified method” because, due to the limited time our common stock has been publicly traded, we lack sufficient historical data to provide a reasonable basis to estimate the expected term of these options.

In December 2007, we granted our President and Chief Executive Officer an option to purchase 500,000 shares of our common stock at the price of $12.80 per share which vests, in 25% increments, only upon attainment of specified market-based conditions tied to the market value of our common stock. Under the provisions of Compensation-Stock Compensation, the fair value of share-based grants with a market vesting condition must be modeled and valued with a path-dependent valuation technique. Accordingly, we estimate the value of such awards using the Monte Carlo binomial simulation model. The primary assumptions used in the model are volatility, a risk-free interest rate, starting stock price, transferability restrictions and the terms of the award, as follows:

·Risk-free interest rate of 3.98%;

·Dividend yield of zero;

·Expected option life of 10 years; and

·Volatility of the expected market price of our common stock over that term of 53.9%.

Using these assumptions and inputs, we estimated that the weighted average grant date fair value of this award was $5.68 per option, with derived service periods ranging from 15 to 32 months for the four performance levels, and averaging 24 months. Under Compensation-Stock Compensation, the calculated $2.8 million fair value of this award must be recognized as expense over a weighted average period of approximately two years whether the market conditions are met or not so long as the grantee meets the service condition.

The following table summarizes the share-based compensation expense we recorded (in thousands):

	Three Months Ended September 30,				Nine Months Ended September 30,
	2010		2009		2010		2009
	(in thousands)
Stock option awards	$	410	$	690	$	1,530	$	2,841
Restricted stock awards	933		600		2,355		1,876
Share-based compensation expense	$	1,343	$	1,290	$	3,885	$	4,717

As of September 30, 2010, there was approximately $2.5 million of total unrecognized share-based compensation cost related to stock options that is expected to be recognized over a weighted-average period of 2.0 years and approximately $8.2 million of total unrecognized share-based compensation cost related to restricted stock awards that is expected to be recognized over a weighted-average period of 2.8 years. We expect to record approximately $1.3 million in share-based compensation for the remainder of fiscal year 2010 related to stock options and restricted stock awards outstanding at September 30, 2010.

11

Note 11. Income Taxes

We account for income taxes in accordance with Income Taxes (ASC 740). Deferred income taxes are recorded for the expected tax consequences of temporary differences between the tax bases of assets and liabilities for financial reporting purposes and amounts recognized for income tax purposes. We record a valuation allowance to reduce our deferred tax assets to the amount of future tax benefit that is more likely than not to be realized. As of September 30, 2010, we have recorded a valuation allowance against our net deferred tax assets resulting in a carrying value of zero.

Management’s judgment is required in assessing the realizability of future deferred tax assets. We consider all available evidence, both positive and negative, including historical levels of income, expectations and risks associated with estimates of future taxable income and ongoing prudent and feasible tax planning strategies in assessing the need for a valuation allowance. If we later determine that it is more likely than not that the net deferred tax assets would be realized, we would reverse the applicable portion of the previously provided valuation allowance. Likewise, in the event we were to determine that we would not be able to realize all or part of our net deferred tax assets in the future, an adjustment to the deferred tax assets would be charged to earnings in the period in which we make such a determination.

We file income tax returns with the Internal Revenue Service and with the taxing authorities of various states and foreign jurisdictions. We periodically perform a review of our uncertain tax position. An uncertain tax position represents our expected treatment of a tax position taken in a filed tax return, or planned to be taken in a future tax return, that has not been reflected in measuring income tax expense for financial reporting purposes. During the year ended December 31, 2009, our liability for uncertain tax positions was reduced to zero as a result of the expiration of the statute of limitation in the particular filing jurisdiction. We do not expect there to be any material changes to the estimated amount of liability associated with our uncertain tax positions over the next twelve months. The tax years 2006 through 2008 remain subject to review by the taxing authorities in several jurisdictions.

Note 12. Commitments and Contingencies

Legal Matters

The Company is subject to legal proceedings, claims, and litigation arising in the ordinary course of business. We are not currently involved in any litigation the outcome of which would, based on information currently available, have a material adverse effect on our financial position, results of operations or cash flows.

Note 13. Segment Information

We have adopted Segment Reporting (ASC 280) requiring segmentation based on our internal organization and reporting of revenue and other performance measures. Our segments are designed to allocate resources internally and provide a framework to determine management responsibility. Operating segments are defined as components of an enterprise about which discrete financial information is available that is evaluated regularly by the chief operating decision maker, or decision making group, in deciding how to allocate resources and in assessing performance. Our chief operating decision maker is our Chief Executive Officer. We have four operating segments, as summarized below:

·Products segment—Includes EnCase® Enterprise, EnCase® eDiscovery, EnCase® Cybersecurity, EnCase® Forensic, EnCase® Portable, Premium License Support Program and hardware sales.

·Professional services segment—This segment performs consulting services and implementations. Consulting services include conducting investigations using our software products.

·Training segment—This segment provides training classes by which we train our customers to effectively and efficiently use our software products.

·��                 Maintenance segment—Maintenance related revenue and costs.

We refer to the revenue generated by our professional services, training and maintenance segments, collectively, as services revenue. Currently, we do not separately allocate operating expenses to these segments, nor do we allocate specific assets, with the exception of goodwill, to these segments. Therefore, the segment information reported includes only revenues, cost of revenues and gross profit. The following tables present the results of operations for each operating segment:

12

	Three Months Ended September 30, 2010
	Product		Professional Services		Training		Maintenance & Other		Total
	(in thousands)
Revenues	$	11,908	$	3,495	$	1,933	$	6,511	$	23,847
Cost of revenues	1,513		2,958		1,320		646		6,437
Gross profit	$	10,395	$	537	$	613	$	5,865	17,410
Total operating expenses									18,181
Operating loss									$	(771	)

	Three Months Ended September 30, 2009
	Product		Professional Services		Training		Maintenance & Other		Total
	(in thousands)
Revenues	$	8,489	$	2,732	$	1,977	$	5,814	$	19,012
Cost of revenues	641		2,456		1,206		620		4,923
Gross profit (loss)	$	7,848	$	276	$	771	$	5,194	14,089
Total operating expenses									16,298
Operating loss									$	(2,209	)

	Nine Months Ended September 30, 2010
	Product		Professional Services		Training		Maintenance & Other		Total
	(in thousands)
Revenues	$	31,585	$	9,778	$	5,869	$	18,716	$	65,948
Cost of revenues	3,273		8,230		4,100		1,763		17,366
Gross profit	$	28,312	$	1,548	$	1,769	$	16,953	48,582
Total operating expenses									52,713
Operating loss									$	(4,131	)

	Nine Months Ended September 30, 2009
	Product		Professional Services		Training		Maintenance & Other		Total
	(in thousands)
Revenues	$	23,834	$	7,737	$	5,640	$	16,889	$	54,100
Cost of revenues	1,974		7,618		4,162		1,768		15,522
Gross profit (loss)	$	21,860	$	119	$	1,478	$	15,121	38,578
Total operating expenses									51,923
Operating loss									$	(13,345	)

Revenue, classified by the major geographic areas in which we operate, is as follows (in thousands):

	Three Months Ended September 30,				Nine Months Ended September 30,
	2010		2009		2010		2009
Revenues
United States	$	20,518	$	15,534	$	55,505	$	43,137
Europe	2,145		2,291		6,395		7,892
Asia	431		395		1,434		1,203
Other	753		792		2,614		1,868
	$	23,847	$	19,012	$	65,948	$	54,100

Note 14. Inventory

Inventory is comprised of hardware and packaged software components and finished goods and is valued at the lower of cost or market, using the first-in first-out method. The following table sets forth, by major classes, inventory as of September 30, 2010 and December 31, 2009 (in thousands):

	September 30,2010		December 31, 2009
Inventory:
Components	$	430	$	275
Finished goods	640		—
Total inventory	$	1,070	$	275

13

Note 15. Related Party Transactions

Certain of our stockholders guarantee substantially all of the obligations under our capital and operating leases as disclosed in Note 7 and Note 8 of our Annual Report on Form 10-K for the year ended December 31, 2009.

In May 2010, we executed a 4-year lease with an entity owned by one of our executives for our facility in Waukesha, Wisconsin. We made payments for rent and operating expenses of approximately $37,500 and $62,500 for the three months and nine months ended September 30, 2010, respectively.

Item 2.Management’s Discussion and Analysis of Financial Condition and Results of Operations

The following discussion of our financial condition and results of operations should be read together with the financial statements and related notes that are included elsewhere in this Quarterly Report. This discussion may contain forward-looking statements based upon current expectations that involve risks and uncertainties. Our actual results may differ materially from those anticipated in these forward-looking statements as a result of various factors, including those set forth in this Quarterly Report under “Risk Factors,” in our Annual Report on Form 10-K for the year ended December 31, 2009 under “Risk Factors” and in other parts of this Quarterly Report.

Overview

We develop and provide the leading software and hardware solutions for digital investigations, including EnCase® Enterprise, a network-enabled product primarily for large corporations and government agencies, and EnCase® Forensic, a desktop-based product primarily for law enforcement agencies.

We were incorporated and commenced operations in 1997. From 1997 through 2002, we generated a substantial portion of our revenues from the sale of our EnCase® Forensic products and related services. We have experienced increases in our revenue as a result of the release of our EnCase® Enterprise products in late 2002, which expanded our customer base into corporate enterprises and federal government agencies. In addition, the releases of our EnCase® eDiscovery solution in late 2005 and EnCase® Information Assurance solution in late 2006 (which has now been replaced by our EnCase® Cybersecurity solution) have increased our average transaction size. In May 2010, we added a family of data acquisition forensic hardware products including forensic duplicators, multiple write blockers and other hardware through our acquisition of Tableau, LLC (“Tableau”). We anticipate that sales of our EnCase® Enterprise products and related services, in particular our EnCase® eDiscovery and EnCase® Cybersecurity solutions, and the sales of our forensic hardware products will comprise a substantial portion of our future revenues.

Factors Affecting Our Results of Operations

There are a number of trends that may affect our business and our industry. Some of these trends or other factors include:

·Legislative and regulatory developments. Our digital investigation solutions allow law enforcement agencies, government organizations and corporations to conduct investigations within the legal and regulatory framework. Historically, the implementation of new laws and regulations surrounding digital investigations has helped create demand for our products. Future changes in applicable laws or regulations could enhance or detract from the desirability of our products.

·Information technology budgets. Deployment of our solutions may require a substantial capital expenditure by our customers. Budgets for information technology-related capital expenditures at corporations and all levels of government organizations are typically cyclical in nature, with generally higher budgets in times of improving economic conditions and lower budgets in times of economic slowdowns.

·Law enforcement agency budgets. We sell our EnCase® Forensic products and training services primarily to law enforcement agencies. Because of the limited nature of law enforcement budgets, funds are typically initially allocated toward solving issues perceived to be the most pressing. Sales of our products could be impacted by changes in the budgets of law enforcement agencies or in the relative priority assigned to digital law enforcement investigations.

·Prevalence and impact of hacking incidents and spread of malicious software. The increasing sophistication of hacking attacks on government and private networks and the global spread of malicious software, such as viruses, worms and rootkits, have increased the focus of corporations and large government organizations on digital investigations and other aspects of network security, which has, in turn, increased demand for our products. Future changes in the number and severity of such attacks or the spread of malicious software could have an effect on the demand for our products.

14

·Seasonality in revenues. We experience seasonality in our revenues, with the third and fourth quarters typically having the highest revenues for the year. We believe that this seasonality results primarily from our customers’ budgeting cycles. The federal government budget year ends in the third calendar quarter of the year and a majority of corporate budget years end in the fourth calendar quarter of the year. In addition, our customers also tend to make software purchases near the end of a particular quarter, which tends to make our revenues for a particular period unpredictable for a significant portion of that period. We expect that this seasonality within particular years and unpredictability within particular quarterly periods will continue for the foreseeable future.

·Amount of commercial litigation. Because commercial litigation often involves eDiscovery, an increase in commercial litigation could increase demand for our products and services, while a decrease in commercial litigation could decrease demand.

Critical Accounting Policies and Estimates

In preparing our financial statements, we make estimates, assumptions and judgments that can have a significant impact on our net revenue, operating income or loss and net income or loss, as well as on the value of certain assets and liabilities on our balance sheet. We believe that the estimates, assumptions and judgments involved in the accounting policies described in “Management’s Discussion and Analysis of Financial Condition and Results of Operations” in Item 7 of our Annual Report on Form 10-K for the year ended December 31, 2009 have the greatest potential impact on our financial statements, so we consider them to be our critical accounting policies and estimates. As a result of our acquisition of Tableau, during the nine months ended September 30, 2010, we included the following in our critical accounting policy and estimates:

Goodwill and indefinite-lived intangibles

We account for our goodwill and indefinite-lived intangible assets in accordance with Intangibles — Goodwill and Other (ASC 350). Goodwill represents the excess of purchase price over fair value of net assets acquired and is assigned to a reporting unit at the date the goodwill is initially recorded. Goodwill and indefinite-lived intangible assets are not amortized but evaluated for impairment annually, or whenever events or changes in circumstances indicate that the value may not be recoverable. A two-step test is performed at the reporting unit level to assess goodwill for impairment. First, the fair value of the reporting unit is compared to its carrying value. If the fair value exceeds the carrying value, the reporting unit is not impaired and no further testing is performed. The second step is performed if the carrying value exceeds the fair value. If the carrying value of the reporting unit exceeds its implied fair value, an impairment loss equal to the difference will be recorded. Indefinite-lived intangible assets are assessed for impairment by comparing the carrying value of the assets with their fair values. If the carrying value of  an indefinite-lived intangible asset exceeds its implied fair value, an impairment loss equal to the difference will be recorded. Application of the impairment test requires significant judgment to estimate the fair value. Changes in estimates and assumptions could materially affect the determination of fair value and/or impairment.

Results of Operations

The following table sets forth our results of operations for the three months and nine months ended September 30, 2010 and 2009, respectively, expressed as a percentage of total revenues:

	Three Months Ended September 30,				Nine Months Ended September 30,
	2010		2009		2010		2009
Revenues:
Product revenue	49.9	%	44.7	%	47.9	%	44.1	%
Services and maintenance revenue	50.1		55.3		52.1		55.9
Total revenues	100.0		100.0		100.0		100.0
Cost of revenues:
Cost of product revenue	6.3		3.4		5.0		3.7
Cost of services and maintenance revenue	20.7		22.5		21.3		25.0
Total cost of revenues	27.0		25.9		26.3		28.7

15

	Three Months Ended September 30,				Nine Months Ended September 30,
	2010		2009		2010		2009
Gross profit	73.0		74.1		73.7		71.3
Operating expenses:
Selling and marketing	37.5		44.7		39.8		50.6
Research and development	18.6		17.7		19.1		19.6
General and administrative	14.9		17.5		15.8		19.6
Depreciation and amortization	5.2		5.8		5.3		6.2
Total operating expenses	76.2		85.7		80.0		96.0
Operating loss	(3.2	)	(11.6	)	(6.3	)	(24.7	)
Other income and expense:
Interest income	—		0.1		0.1		0.1
Interest expense	—		—		—		—
Other income, net	—		0.1		—		0.1
Total other income and expense	—		0.2		0.1		0.2
Loss before income taxes	(3.2	)	(11.4	)	(6.2	)	(24.5	)
Income tax provision	—		—		0.1		0.2
Net loss	(3.2	)%	(11.4	)%	(6.3	)%	(24.7	)%

The following table sets forth share-based compensation expense recorded in each of the respective periods (in thousands):

	Three Months Ended September 30,				Nine Months Ended September 30,
	2010		2009		2010		2009
Non-cash Share Based Compensation Data (1):
Cost of product revenue	$	18	$	5	$	36	$	18
Cost of services and maintenance revenue	215		241		650		885
Selling and marketing	398		393		1,212		1,567
Research and development	331		291		857		1,015
General and administrative	381		360		1,130		1,232
Total non-cash share based compensation	$	1,343	$	1,290	$	3,885	$	4,717

(1)Non-cash share-based compensation recorded in the three- and nine-month periods ended September 30, 2010 and 2009 relates to stock options and restricted share awards granted to employees measured under the fair value method. See Notes 9 and 10 to the condensed consolidated financial statements.

Comparison of Results of Operations for the Three and Nine Months Ended September 30, 2010 and 2009

Sources of Revenues

Our software product sales transactions typically include the following elements: (i) a software license fee paid for the use of our products under a perpetual license term, or for a specific term; (ii) an arrangement for first-year support and maintenance, which includes unspecified software updates, upgrades and post-contract support; (iii) and professional services for installation, implementation, consulting and training. We derive the majority of our revenues from sales of our software products. We sell our software products and services primarily through our direct sales force and in some cases we utilize resellers. We sell our hardware products primarily through resellers.

We recognize revenue in accordance with the Accounting Standards Codification (“ASC”) Software Industry—Revenue Recognition topic (ASC 985-605), which, if revenues are to be recognized upon product delivery, requires among other things vendor-specific objective evidence of fair value, or VSOE, for each undelivered element of multiple element customer contracts. Revenue associated with the sale of our forensic hardware is recognized upon shipment to the customer, provided that all other criteria for revenue recognition have been met.

16

	Three Months Ended September 30,						Nine Months Ended September 30,
(Dollars in thousands)	2010		Change %		2009		2010		Change %		2009
Product revenues:
Enterprise products	$	6,256	16	%	$	5,399	$	16,613	32	%	$	12,592
Forensic products	5,652		83	%	3,090		14,972		33	%	11,242
Total product revenues	11,908		40	%	8,489		31,585		33	%	23,834
Services and maintenance revenues:
Professional services	3,495		28	%	2,732		9,778		26	%	7,737
Training	1,933		(2	)%	1,977		5,869		4	%	5,640
Maintenance and other	6,511		12	%	5,814		18,716		11	%	16,889
Total services and maintenance revenues	11,939		13	%	10,523		34,363		14	%	30,266
Total revenues	$	23,847	25	%	$	19,012	$	%	22		$	54,100

Product Revenues

We generate product revenues principally from two product categories: Enterprise products and Forensic products. In late 2009, we redefined the categories that made up our product revenues. Our Enterprise products now include perpetual licenses and Pay-Per-Use fees related to our EnCase®Enterprise, eDiscovery, Legal Hold, Data Audit & Policy Enforcement, EnCase® Cybersecurity and OEM add-on products. Our Forensic products now includes revenues related to EnCase®Forensic, Portable, Neutrino®mobile forensic device, Field Intelligence Model, and other third-party hardware. Our Forensic products also include our Premium License Support Program product, which is sold on a subscription basis for a term of one or three years. As of May 2010, we added a line of forensic hardware products to our Forensic products. Revenues from OEM, Neutrino®, Field Intelligence Model and other hardware were previously reported as Other product revenue. For comparability purposes, we have reclassified the 2009 categories as specified above; however, total product revenues remain unchanged as a result of the reclassification. During the first two quarters of each fiscal year, we typically experience our lowest levels of product sales due to the seasonal budgetary cycles of our customers. The third quarter is typically the strongest quarter for sales to our federal government customers. Typically, sales to our corporate customers are highest in the fourth quarter.

Product revenues increased by $3.4 million, or 40%, and $7.8 million, or 33%, for the three and nine months ended September 30, 2010, respectively, as compared with the same periods in 2009. The increases in product revenues were primarily due to a $2.6 million and $3.7 million increase in Forensic product revenues for the three and nine months ended September 30, 2010, respectively, as compared with the same periods in 2009. The increase in Forensic product revenues were due to the addition of revenue through sales of forensic hardware products that we acquired as a result of our acquisition of Tableau in May 2010 and growth in the forensic software market. EnCase® Enterprise license revenues increased $0.9 million and $4.0 million for the three and nine months ended September 30, 2010, respectively, as compared with the same periods in 2009. The increase in EnCase®Enterprise license revenues was due to increased sales to our private and public sector customers.

Services and Maintenance Revenues

Services and maintenance revenues increased by $1.4 million, or 13%, and $4.1 million, or 14%, for the three and nine months ended September 30, 2010, respectively, as compared with the same periods in 2009. Professional services revenues increased by $0.8 million, or 28%, and $2.0 million, or 26%, for the three and nine months ended September 30, 2010, respectively, as compared with the same periods in 2009, due to increased demand for both implementation and eDiscovery services as a result of the increase in enterprise product sales compared to the prior year. Training revenues for the three months ended September 30, 2010 were flat while training revenues increased by $0.2 million, or 4%, for the nine months ended September 30, 2010, as compared with the same period in 2009. The increase for the nine month period was primarily due to increases in the travel and training budgets of our customers, which resulted in increased training attendance. Maintenance revenue increased by $0.7 million, or 12%, and $1.8 million, or 11%, for the three and nine months ended September 30, 2010, respectively, as compared with the same periods in 2009, as a result of sustained increases in our installed product base and high annual renewal rates by customers continuing maintenance support on our products.

17

Cost of Revenues

	Three Months Ended September 30,									Nine Months Ended September 30,
(Dollars in thousands)	2010			Change %		2009				2010				Change %		2009
Cost of product revenues	$	1,513		136	%	$		641		$		3,273		66	%	$	1,974
Cost of services and maintenance revenues:
Professional services	2,958			20	%	2,456				8,230				8	%	7,618
Training	1,320			9	%	1,206				4,100				(1	)%	4,162
Maintenance and other	646			4	%	620				1,763				—	%	1,768
Total cost of services and maintenance revenues	4,924			15	%	4,282				14,093				4	%	13,548
Total cost of revenues	$	6,437		31	%	$		4,923		$		17,366		12	%	$	15,522
Share-based compensation included above:
Cost of product revenues	$	18				$	5			$	36					$	18
Cost of services and maintenance revenues	$	215				$	241			$	650					$	885
Gross Margin Percentage
Products	87.3		%			92.4			%	89.6			%			91.7		%
Services and maintenance	58.8		%			59.3			%	59.0			%			55.2		%
Total	73.0		%			74.1			%	73.7			%			71.3		%

Cost of Product Revenues

Cost of product revenues consists principally of the cost of producing our software products, the cost of manufacturing our hardware products and product distribution costs, including the cost of compact discs, packaging, shipping, customs duties, and, to a lesser extent, compensation and related overhead expenses. While these costs are primarily variable with respect to sales volumes, they remain low in relation to the revenues generated and result in higher gross margins than our services and training businesses. Our gross margins can be affected by product mix, as our Enterprise products are generally higher margin products than our Forensic products, which include software and hardware.

Cost of products revenues increased by $0.9 million, or 136%, and $1.3 million, or 66%, for the three and nine months ended September 30, 2010, respectively, as compared with the same periods in 2009. These increases resulted primarily from an increase in forensic hardware product revenues as a result of our acquisition of Tableau in May 2010.

Cost of Services and Maintenance Revenues

The costs of professional services and training revenues are largely comprised of employee compensation costs, including share-based compensation costs, and related overhead, travel and facilities costs. The cost of maintenance revenue is primarily outsourced, but also includes employee compensation cost for customer technical support and related overhead costs.

Total cost of services and maintenance revenues increased by $0.6 million, or 15%, and $0.5 million, or 4%, for the three and nine months ended September 30, 2010, respectively, as compared with the same periods in 2009. The increases were primarily due to higher compensation and benefits costs associated with an increase in headcount in these segments. Services and maintenance gross margins for the three months ended September 30, 2010, were relatively flat as compared with the same period in 2009. For the nine months ended September 30, 2010, services and maintenance gross margin increased to 59.0% as compared with 55.2% in the same period in 2009, resulting primarily from overall higher professional services utilization rates and reduced expenses.

18

Operating Expenses

	Three Months Ended September 30,								Nine Months Ended September 30,
(Dollars in thousands)	2010			Change %		2009			2010			Change %		2009
Selling and marketing expenses	$	8,955		5	%	$	8,507		$	26,240		(4	)%	$	27,388
Research and development expenses	$	4,432		32	%	$	3,363		$	12,614		19	%	$	10,597
General and administrative expenses	$	3,544		6	%	$	3,331		$	10,391		(2	)%	$	10,580
Depreciation and amortization expenses	$	1,250		14	%	$	1,097		$	3,468		3	%	$	3,358
Share-based compensation included above:
Selling and marketing expenses	$	398				$	393		$	1,212				$	1,567
Research and development expenses	$	331				$	291		$	857				$	1,015
General and administrative expenses	$	381				$	360		$	1,130				$	1,232
As a percentage of revenue:
Selling and marketing expenses	37.6		%			44.7		%	39.8		%			50.6		%
Research and development expenses	18.6		%			17.7		%	19.1		%			19.6		%
General and administrative expenses	14.9		%			17.5		%	15.8		%			19.6		%
Depreciation and amortization expenses	5.2		%			5.8		%	5.3		%			6.2		%

Selling and Marketing Expenses

Selling and marketing expenses consist primarily of personnel costs and costs related to our sales force and marketing staff. Selling and marketing expenses also include expenses relating to advertising, brand building, marketing promotions and trade show events (net of amounts received from sponsors and participants), product management, and travel and allocated overhead. We employed 124 and 135 sales and marketing personnel at September 30, 2010 and 2009, respectively.

Selling and marketing expenses increased by $0.4 million, or 5%, and decreased by $1.1 million, or 4%, for the three and nine months ended September 30, 2010, respectively, as compared with the same periods in 2009. The increase in selling and marketing expenses for the three month period was primarily due to increased compensation costs associated with increased product revenues and the decrease in selling and marketing expenses for the nine month period was primarily due to reduced compensation and related expenses associated with decreased headcount.

Research and Development Expenses

Research and development expenses consist primarily of compensation, including share-based compensation, and related overhead expenses. In order to develop new product offerings, continue developing existing products and improve quality assurance, we increased the number of research and development personnel that we employ to 92 at September 30, 2010 from 79 at September 30, 2009.

Research and development expenses increased by $1.1 million, or 32%, and $2.0 million, or 19%, for the three and nine months ended September 20, 2010, respectively, as compared with the same periods in 2009. The increases were primarily due to the acquisition of Tableau in May 2010 as well as an increase in the scope and number of products in development.

General and Administrative Expenses

General and administrative expenses consist of personnel and related costs for accounting, legal, information systems, human resources and other administrative functions. In addition, general and administrative expenses include professional service fees, bad debt expense, and other corporate expenses and related overhead.

General and administrative expenses increased by $0.2 million, or 6%, for the three months ended September 20, 2010 as compared with the same period in 2009. This increase is primarily attributable to increases in compensation and related overhead expenses, offset by reductions in legal fees and bad debt expense, as compared with the same period in 2009. For the nine months ended September 30, 2010, general and administrative expenses decreased by $0.2 million, or 2%, as compared with the same period in 2009. This reduction was primarily attributable to reduced professional services fees and reduced compensation and related overhead expenses.

19

Depreciation and Amortization Expenses

Depreciation and amortization expenses consist of depreciation and amortization of our leasehold improvements, furniture, computer hardware and software and intangible assets. Depreciation and amortization expenses increased by $0.2 million, or 14%, and $0.1 million, or 3%, for the three and nine months ended September 30, 2010, respectively, as compared with the same periods in 2009. The increases were primarily due to the amortization of intangible assets we acquired through our acquisition of Tableau in May 2010.

Other Income and Expense

Interest income (expense) and other income (expense), net consist of interest earned on cash balances and other miscellaneous income and expense items. Interest income decreased by $15,000 for the three months ended September 30, 2010, due to our lower cash and cash equivalents balance, and the corresponding decrease in earned interest, compared with the same period in 2009. For the nine months ended September 30, 2010, interest income increased by $12,000, compared with the same period in 2009. The increase was due to slightly higher market interest rates earned on our cash and cash equivalents.

Income Tax Provision

We operate in multiple jurisdictions and are subsequently taxed pursuant to the tax laws of these jurisdictions. Our effective tax rate may be affected by changes in tax laws or their interpretations in any given jurisdiction, changes in utilization of net operating loss and tax credit carryforwards, changes in geographical mix of income and expense, and changes in management’s assessment of matters such as the ability to realize deferred tax assets. We recorded income tax provisions for the three and nine months ended September 30, 2010 of $4,000 and $90,000, respectively, as compared with income tax benefit of $1,000 and provision of $85,000 during the same periods in 2009. The income tax provision is primarily attributable to foreign income taxes and state/local franchise taxes, based on our estimated effective annual tax rate and taxable income (loss) for the current year. After consideration of all available evidence, both positive and negative, including historical levels of income, expectations and risks associated with estimates of future taxable income and ongoing prudent and feasible tax planning strategies, a full valuation allowance is maintained against our net deferred tax assets. Our estimated effective tax rate was 2.2% and 0.6% for the nine months ended September 30, 2010 and 2009, respectively, which differs from the US statutory rate of 34% primarily due to the recording of state and foreign income taxes, non-deductible expenses and changes in valuation allowance.

Liquidity and Capital Resources

Since inception, we have largely financed our operations from the cash flow generated from the sale of our products and services. In December 2006, we issued and sold 3,250,000 shares of our common stock at $11.50 per share, for net proceeds of $34.8 million, in our initial public offering. As of September 30, 2010, we had $21.8 million in cash and cash equivalents. We believe that our cash flow from operations and our cash and cash equivalents are sufficient to fund our working capital and capital expenditure requirements for at least the next 12 months.

Changes in Cash Flow

We generate cash from operating activities primarily from cash collections related to the sale of our products and services. Net cash used in operating activities was $0.8 million for the nine months ended September 30, 2010, as compared with $2.3 million for the same period in 2009. The decrease in cash used in operating activities was primarily a result of a decrease in our net loss to $4.2 million from $13.4 million, a decrease in trade receivables of $1.5 million compared to an increase of $4.6 million, a decrease in deferred revenues of $2.5 million compared to an increase of $0.4 million, partially offset by an increase in accrued liabilities of $1.2 million compared to a decrease of $0.6 million.

Net cash used in investing activities was $12.6 million for the nine months ended September 30, 2010 as compared with $1.7 million for the same period in 2009. The increase in cash used in investing activities is primarily due to the acquisition of Tableau in May 2010 for a net cash purchase price of $10.7 million.

Net cash used in financing activities was $1.4 million for the nine months ended September 30, 2010, as compared with cash used in financing activities of $1.7 million during the same period in 2009. The decrease in net cash used in financing activities was due primarily to an increase of $0.3 million in proceeds received from the exercise of our stock option grants during the nine months ended September 30, 2010.

20

We maintain a $3.0 million revolving line of credit with a bank. Borrowings under this line of credit would be collateralized by substantially all our assets. At September 30, 2010, there were no amounts outstanding under this line of credit. The line of credit requires that we remain in compliance with certain financial covenants, and at June 30, 2009 we were in breach of the covenant that prohibited a cumulative net loss (excluding non-cash share-based compensation) in excess of $4.0 million during any one fiscal year. In July 2009, we executed an amendment to the credit agreement with our bank, which increased the maximum allowable cumulative net loss under the covenant to $9.0 million (excluding non-cash share-based compensation) for the remainder of the 2009 fiscal year, and $4.0 million for any subsequent fiscal quarter. The amendment also included a waiver of the covenant for the period ended June 30, 2009. In addition, borrowings under the amended credit agreement bear interest at one of the following rates (as selected by us): a rate equal to the bank’s alternate base rate plus 2% or the bank’s LIBOR plus 3%. In March 2010, an amendment to the credit agreement was entered into to extend the expiration date to May 31, 2012 and decrease the maximum cumulative net loss permitted under the credit facility to $5.0 million (excluding non-cash share-based compensation) during any one fiscal year. At September 30, 2010, we were in compliance with the covenants associated with the revolving line of credit.

Contractual Obligations and Commitments

We currently have no material cash commitments, except our normal recurring trade payables, expense accruals and leases, all of which are currently expected to be funded through existing working capital and future cash flows from operations. At September 30, 2010, our outstanding contractual cash commitments were largely limited to our non-cancellable lease obligations, primarily relating to office facilities. In “Management’s Discussion and Analysis of Financial Condition and Results of Operations” in Item 7 of our Annual Report on Form 10-K for the year ended December 31, 2009, we reported that our contractual obligation for these non-cancellable lease obligations as of December 31, 2009 was approximately $15.0 million, of which $3.7 million is due during 2010. Our future capital requirements will depend on many factors, including our rate of revenue growth, the expansion of our selling and marketing activities, the timing and extent of research and development spending to support product development and enhancement efforts, costs associated with expansion into new territories or markets, the timing of the introduction of new products and services, the enhancement of existing products and the continuing market acceptance of our products and services. To the extent that our existing cash, cash from operations or the availability of cash under our line of credit are insufficient to fund our future activities and planned growth, we may need to raise additional funds through public or private equity or debt financings.  Additional funds may not be available on terms favorable to us or at all. Furthermore, although we cannot accurately anticipate the effect of inflation or foreign exchange markets on our operations, we do not believe these external economic forces have had, or are likely in the foreseeable future to have, a material impact on our results of operations.

Off-Balance Sheet Arrangements

At September 30, 2010, we had no off-balance sheet arrangements as defined in Item 303(a)(4) of the Securities and Exchange Commission’s Regulation S-K. We do not have material relationships or transactions with persons or entities that derive benefits from their non-independent relationship with us or our related parties except as disclosed in this report.

Recent Accounting Pronouncements

Revenue Recognition (Accounting Standards Codification (ASC) 605): In October 2009, an update was made to Revenue Recognition—“Multiple-Deliverable Revenue Arrangements—a consensus of the FASB Emerging Issues Task Force” and the corresponding Software—“Certain Revenue Arrangements That Include Software Elements—a consensus of the FASB Emerging Issues Task Force.” The update to Revenue Recognition removes the objective-and-reliable-evidence-of-fair-value criterion, replaces references to “fair value” with “selling price,” provides a hierarchy that entities must use to estimate the selling price, eliminates the use of the residual method for allocation, and expands the ongoing disclosure requirements. The Software update changes the accounting model for revenue arrangements and provides guidance on how a vendor should allocate arrangement consideration to deliverables that includes both tangible products and software. Effective prospectively for revenue arrangements entered into or materially modified in fiscal years beginning on or after June 15, 2010, we have adopted these standards with no material impact on our consolidated financial statements.

Compensation- Stock Compensation (ASC 718): In April 2010, the FASB issued an update to Compensation-Stock Compensation. The update clarifies that an employee share-based payment award with an exercise price denominated in the currency of a market in which a substantial portion of the entity’s equity shares trade should not be considered to contain a condition that is not a market, performance or service condition. Therefore, an entity would not classify such an award as a liability if the award otherwise qualifies as equity.  The standard is effective for interim and annual periods ending after December 15, 2010 and should be applied prospectively. The adoption of this standard is not expected to have a material impact on our consolidated financial statements.

Revenue Recognition (ASC 605): In April 2010, an update was made to Revenue Recognition - “Milestone Method of Revenue Recognition.” The update to Revenue Recognition provides guidance on defining a milestone and determining when it may be appropriate to apply the milestone method of revenue recognition for research or development transactions. Consideration that is contingent on achievement of a milestone in its entirety may be recognized as revenue in the period in which the milestone is achieved only if the milestone is judged to meet certain criteria to be considered substantive. Effective prospectively for milestones achieved in fiscal year and interim periods beginning on or after June 15, 2010, we have adopted this standard with no material impact on our consolidated financial statements.

21

Item 3.Quantitative and Qualitative Disclosure about Market Risk

Market Risk. Market risk represents the risk of loss that may impact our financial position due to adverse changes in financial market prices and rates. Our market risk exposure is primarily a result of fluctuations in foreign exchange rates, interest rates and credit risk. We do not hold or issue financial instruments for trading purposes.

Foreign Currency Risk. To date, substantially all of our international sales have been denominated in US dollars, and therefore, the majority of our revenues are not subject to foreign currency risk. Our operating expenses and cash flows are subject to fluctuations due to changes in foreign currency exchange rates, but such changes have historically had relatively little impact on our operating results and cash flows. A strengthening of the dollar could make our products and services less competitive in foreign markets and therefore could reduce our revenues. In the future, an increased portion of our revenues and costs may be denominated in foreign currencies. We do not enter into derivative instrument transactions for trading or speculative purposes.

Interest Rate Risk. At September 30, 2010, our investment portfolio, consisting of highly liquid debt instruments of the US government, is subject to interest rate risk. The fair value of our investment portfolio would not be significantly impacted by either a 100 basis point increase or decrease in interest rates due mainly to the short-term nature of the major portion of our investment portfolio.

Item 4.Controls and Procedures

Management, with the participation of the President and Chief Executive Officer and Chief Financial Officer, has performed an evaluation of our disclosure controls and procedures (as defined in Rules 13a-15(e) and 15d-15(e) of the Securities Exchange Act of 1934). This evaluation includes consideration of the controls, processes and procedures that are designed to ensure that information required to be disclosed by us in the reports we file under the Securities Exchange Act of 1934 is recorded, processed, summarized and reported within the time periods specified in the Securities and Exchange Commission’s rules and forms and that such information is accumulated and communicated to our management, including our President and Chief Executive Officer and Chief Financial Officer, as appropriate to allow timely decisions regarding required disclosure. Based on such evaluation, our President and Chief Executive Officer and Chief Financial Officer concluded that, as of September 30, 2010, our disclosure controls and procedures were effective.

Changes in Internal Control Over Financial Reporting

There have been no changes in our internal control over financial reporting during the third quarter of fiscal 2010 that have materially affected, or are reasonably likely to materially affect, our internal controls over financial reporting.

PART II. OTHER INFORMATION

Item 1.Legal Proceedings

From time to time, we may become involved in various lawsuits and legal proceedings that arise in the ordinary course of business. Litigation is subject to inherent uncertainties, and an adverse result in these or other matters may arise from time to time that may harm our business. We are not currently aware of any such legal proceedings or claims that we believe will have, individually or in the aggregate, a material adverse effect on our business, financial condition or results of operations.

Item 1A.Risk Factors

There have been no material changes to the risk factors as presented in our Annual Report on Form 10-K for the year ended December 31, 2009, filed with the Securities and Exchange Commission on February 26, 2010.

Item 2.Unregistered Sales of Equity Securities and Use of Proceeds

Purchases of Equity Securities by the Issuer

In August 2008, our Board of Directors authorized a program to repurchase shares of our common stock having an aggregate value of up to $8.0 million. As of September 30, 2010, we had approximately $4.8 million remaining under this authorization. The authorization allows us to repurchase our common stock from time to time through open market purchases and negotiated transactions, or otherwise. The timing, nature and amount of such transactions will depend on a variety of factors, including market conditions, and the program may be suspended, discontinued or accelerated at any time. The sources of funds for the purchases under the remaining authorization are our existing cash on hand and cash from operations. Purchases are made in the open market, through block trades and other negotiated transactions. Repurchased shares are held in Treasury Stock and have not been retired.

22

In addition to the repurchased shares outlined below, we withheld approximately 5,000 and 44,000 common shares for the three and nine months ended September 30, 2010, respectively, from employees to satisfy their personal income tax withholding requirements upon the vesting of share awards issued under our equity compensation plans during the quarter. We may engage in similar transactions from time to time related to future vesting of employee restricted stock awards.

The following table summarizes our purchases of common stock:

Calendar Month	Total Number of Shares Repurchased	Average Price Paid Per Share		Total Number of Shares Purchased as Part of Publicly Announced Program	Approximate Dollar Value of Shares that May Yet Be Purchased under the Program
July 2008	—	$	—	—	$	8,000,000
August 2008	22,500	$	5.99	22,500	$	7,866,000
September 2008	20,000	$	5.98	20,000	$	7,750,000
May 2009	98,915	$	3.31	98,915	$	7,422,000
June 2009	173,100	$	3.63	173,100	$	6,794,000
July 2009	95,836	$	3.78	95,836	$	6,432,000
August 2009	54,850	$	3.86	54,850	$	6,220,000
August 2010	141,356	$	5.07	141,356	$	5,503,000
September 2010	125,045	$	5.27	125,045	$	4,844,000
Total	731,602			731,602	$	4,844,000

Item 3.Defaults upon Senior Securities

No information is required in response to this item.

Item 4.Reserved

No information is required in response to this item.

Item 5.Other Information

No information is required in response to this item.

Item 6.Exhibits

Exhibit Number	Description of Documents
31.1	Certification of Chief Executive Officer pursuant to Section 302 of the Sarbanes-Oxley Act of 2002
31.2	Certification of Chief Financial Officer pursuant to Section 302 of the Sarbanes-Oxley Act of 2002
32.1†	Certification of Chief Executive Officer pursuant to Section 906 of the Sarbanes-Oxley Act of 2002
32.2†	Certification of Chief Financial Officer pursuant to Section 906 of the Sarbanes-Oxley Act of 2002

† These certifications are being furnished solely to accompany this Quarterly Report pursuant to 18 U.S.C. Section 1350, and are not being filed for purposes of Section 18 of the Securities Exchange Act of 1934 and are not to be incorporated by reference into any filing of Guidance Software, Inc., whether made before or after the date hereof, regardless of any general incorporation language in such filing.

23

SIGNATURE

Pursuant to the requirements of the Securities Exchange Act of 1934, the registrant has duly caused this report to be signed on its behalf by the undersigned thereunto duly authorized.

	Guidance Software, Inc.
	By:	/s/ Barry J. Plaga
		Barry J. Plaga
		Chief Financial Officer
		(Principal Financial Officer)
Dated: November 10, 2010

24