Exhibit 10.2

GUIDANCE SOFTWARE, INC.

SECOND AMENDED AND RESTATED 2004 EQUITY INCENTIVE PLAN

PERFORMANCE-VESTING RESTRICTED STOCK AGREEMENT

Guidance Software, Inc., a Delaware corporation (the “Company”), pursuant to its Second Amended and Restated 2004 Equity Incentive Plan, as amended from time to time (the “Plan”), hereby grants to the individual listed below (“Holder”) the number of shares of the Company’s common stock, par value $0.001 per share, set forth below (the “Shares”). This Restricted Stock Award is subject to all of the terms and conditions as set forth in this Performance-Vesting Restricted Stock Agreement (the “Agreement”) (including, without limitation, the Restrictions on the Shares set forth in the Agreement) and the Plan, each of which are incorporated herein by reference. Unless otherwise defined herein, the terms defined in the Plan shall have the same defined meanings in this Agreement.

NOTICE OF RESTRICTED STOCK AWARD

1

2

ARTICLE I.

GENERAL

1.1          Definitions.  For purposes of the Agreement, the following terms shall have the meanings set forth below.  All capitalized terms used in this Agreement without definition shall have the meanings ascribed in the Plan.

(a)           “Core Product Revenue” means revenue derived from sales of the Company’s Endpoint Investigator, Risk Manager and Endpoint Security products.

(b)           “Performance Vested Shares” means the product of (i) the total number of shares of Restricted Stock granted hereby and (ii) the applicable Performance Vesting Percentage.

1.2          Incorporation of Terms of Plan. The Award (as defined below) is subject to the terms and conditions of the Plan which are incorporated herein by reference. In the event of any inconsistency between the Plan and this Agreement, the terms of the Plan shall control.

ARTICLE II.

AWARD OF RESTRICTED STOCK

2.2                               Award of Restricted Stock.

(a)           Award. In consideration of the Holder’s agreement to remain in the service or employ of the Company or one of its Subsidiaries, and for other good and valuable consideration, the Company issues to the Holder the Award described in this Agreement (the “Award”). The number of shares of Restricted Stock subject to the Award is set forth in the Notice of Restricted Stock Award above; provided, however, that in the event that the Administrator determines that Core Product Revenue during the Performance Period exceeds the “Target Level” and the Holder remains a Service Provider through the Certification Date, the Company shall grant the Holder the Additional Restricted Shares as set forth in the Notice of Restricted Stock Award above. The Holder is a Service Provider of the Company.

(b)           Book Entry Form. At the sole discretion of the Administrator, the shares of Restricted Stock will be issued in either (i) uncertificated form, with the shares of Restricted Stock recorded in the name of the Holder in the books and records of the Company’s transfer agent with appropriate notations to the extent that the shares of Restricted Stock remain subject to the Restrictions (as defined below), or (ii) certificate form pursuant to the terms of Sections 2.1(c) and (d).

(c)           Legend. Certificates representing shares of Restricted Stock issued pursuant to this Agreement shall, until all Restrictions on transfer imposed pursuant to this Agreement lapse or shall have been removed and new certificates are issued, bear the following legend (or such other legend as shall be determined by the Administrator):

3

“THE SECURITIES REPRESENTED BY THIS CERTIFICATE ARE SUBJECT TO CERTAIN VESTING REQUIREMENTS AND MAY BE SUBJECT TO FORFEITURE UNDER THE TERMS OF A RESTRICTED STOCK AWARD AGREEMENT BY AND BETWEEN GUIDANCE SOFTWARE, INC. AND THE REGISTERED OWNER OF SUCH SHARES OF RESTRICTED STOCK, AND SUCH SHARES OF RESTRICTED STOCK MAY NOT BE, DIRECTLY OR INDIRECTLY, OFFERED, TRANSFERRED, SOLD, ASSIGNED, PLEDGED, HYPOTHECATED OR OTHERWISE DISPOSED OF UNDER ANY CIRCUMSTANCES, EXCEPT PURSUANT TO THE PROVISIONS OF SUCH AGREEMENT.”

(d)           Escrow. The Secretary of the Company or such other escrow holder as the Administrator may appoint may retain physical custody of any certificates representing the shares of Restricted Stock until all of the Restrictions on transfer imposed pursuant to this Agreement lapse or shall have been removed. If an escrow holder is so appointed, the Holder shall not retain physical custody of any certificates representing shares of Restricted Stock issued to the Holder that are unvested and subject to Restrictions.

2.3                               Restrictions.

(a)           Forfeiture of Shares. In the event that the Holder ceases to be a Service Provider for any reason prior to the satisfaction of the Performance Vesting Condition or the Time Vesting Condition, as applicable, set forth in the Notice of Restricted Stock Award above, then, immediately upon such termination, the Holder shall automatically and without further action by the Holder, the Company or any other party forfeit any and all shares of Restricted Stock, including any outstanding Performance Vested Shares, then subject to the Restrictions, and the Holder shall have no further right or interest in such shares of Restricted Stock. In addition, any shares of Restricted Stock which have not become Performance Vested Shares as of the completion of the Performance Period shall automatically be cancelled and forfeited without payment of any consideration therefor, and the Holder shall have no further right to or interest in such shares.  Upon any such forfeiture, such shares of Restricted Stock shall, automatically and without further action by the Holder, the Company or any other party, be cancelled and returned to the status of authorized but unissued Shares. For purposes of this Agreement, “Restrictions” shall mean the restrictions on sale or other transfer set forth in Section 3.1 and the exposure to forfeiture set forth in this Section 2.3(a).

(b)           Vesting and Lapse of Restrictions. Subject to Section 2.2(a), the Award shall vest and the Restrictions shall lapse in accordance with the Performance Vesting Condition and the Time Vesting Condition set forth in the Notice of Restricted Stock Award above; provided, however, that to the extent permitted by applicable law and the terms of the Plan, the Administrator may, in its sole discretion, suspend the vesting and lapsing of Restrictions applicable to the Award during all or any part of any leave of absence from employment taken by the Holder.

(c)           Accelerated  Vesting. Subject to Section 2.2(a), in the event that an Acquisition occurs, then, immediately prior thereto, the Award shall vest and the Restrictions shall lapse with respect to 100% of the shares of Restricted Stock subject thereto, provided that

4

the Holder continues to be a Service Provider until immediately prior to the Acquisition.  In the event such Acquisition occurs prior to Certification Date, then the Award shall vest at the “Target Level” Performance Vesting Percentage, without any pro-ration based on the portion of the Performance Period completed prior to the date of such Acquisition.

(d)           Tax Withholding; Conditions to Issuance of Certificates. Notwithstanding any other provision of this Agreement (including, without limitation, Section 2.1(b)):

(i)            No Shares shall be recorded in the name of the Holder in the books and records of the Company’s transfer agent and no new certificate shall be delivered to the Holder or the Holder’s legal representative unless and until the Holder or the Holder’s legal representative shall have paid to the Company the full amount of all federal and state withholding or other taxes applicable to the taxable income of Holder resulting from the grant of the shares of Restricted Stock or the lapse or removal of the Restrictions. The Administrator may in its discretion and in satisfaction of the foregoing requirement allow the Holder to elect to have the Company withhold Shares otherwise issuable under the Award (or allow the return of Shares) having a Fair Market Value equal to the sums required to be withheld. Notwithstanding any other provision of the Plan or this Agreement, the number of Shares which may be withheld with respect to the issuance, vesting or payment of the shares of Restricted Stock in order to satisfy the Holder’s federal and state income and payroll tax liabilities with respect to the issuance, vesting or payment of the shares of Restricted Stock shall be limited to the number of Shares which have a Fair Market Value on the date of withholding equal to the aggregate amount of such liabilities based on the minimum statutory withholding rates for federal and state tax income and payroll tax purposes that are applicable to such supplemental taxable income.

(ii)           The Company shall not be required to record any Shares in the name of the Holder in the books and records of the Company’s transfer agent or issue or deliver any certificate or certificates for any Shares prior to the fulfillment of all of the following conditions:   (A) the admission of the Shares to listing on all stock exchanges on which the Company’s common stock is then listed, (B) the completion of any registration or other qualification of the Shares under any state or federal law or under rulings or regulations of the Securities and Exchange Commission or other governmental regulatory body, which the Administrator shall, in its sole and absolute discretion, deem necessary and advisable, (C) the obtaining of any approval or other clearance from any state or federal governmental agency that the Administrator shall, in its absolute discretion, determine to be necessary or advisable and (D) the lapse of any such reasonable period of time following the date the Restrictions lapse as the Administrator may from time to time establish for reasons of administrative convenience.

ARTICLE III.

OTHER PROVISIONS

3.1          Restricted Stock Not Transferable. No shares of Restricted Stock that are subject to the Restrictions or any interest or right therein or part thereof shall be liable for the debts, contracts or engagements of the Holder or the Holder’s successors in interest or shall be subject to disposition by transfer, alienation, anticipation, pledge, encumbrance, assignment or

5

any other means whether such disposition be voluntary or involuntary or by operation of law by judgment, levy, attachment, garnishment or any other legal or equitable proceedings (including bankruptcy), and any attempted disposition thereof shall be null and void and of no effect.

3.2          Rights as Stockholder. Except as otherwise provided herein, upon the Grant Date (or with respect to any Additional Restricted Shares, upon the Certification Date) the Holder shall have all the rights of a stockholder with respect to the shares of Restricted Stock, subject to the Restrictions contained herein, including the right to vote the shares of Restricted Stock and the right to receive any cash or stock dividends paid to or made with respect to the shares of Restricted Stock.

3.3          Not a Contract of Employment. Nothing in this Agreement or in the Plan shall confer upon the Holder any right to continue to serve as an employee or other service provider of the Company or any of its Subsidiaries.

3.4          Governing  Law. The laws of the State of California shall govern the interpretation, validity, administration, enforcement and performance of the terms of this Agreement regardless of the law that might be applied under principles of conflicts of laws.

3.5          Conformity to Securities Laws. The Holder acknowledges that the Plan and this Agreement are intended to conform to the extent necessary with all provisions of the Securities Act and the Exchange Act, and any and all regulations and rules promulgated thereunder by the Securities and Exchange Commission, including without limitation Rule 16b-3 under the Exchange Act. Notwithstanding anything herein to the contrary, the Plan shall be administered, and this Award is granted, only in such a manner as to conform to such laws, rules and regulations. To the extent permitted by applicable law, the Plan and this Agreement shall be deemed amended to the extent necessary to conform to such laws, rules and regulations.

3.6          Amendment, Suspension and Termination. To the extent permitted by the Plan, this Agreement may be wholly or partially amended or otherwise modified, suspended or terminated at any time or from time to time by the Administrator or the Board, provided, that, except as may otherwise be provided by the Plan, no amendment, modification, suspension or termination of this Agreement shall adversely affect the Award in any material way without the prior written consent of the Holder.

3.7          Notices. Notices required or permitted hereunder shall be given in writing and shall be deemed effectively given upon personal delivery or upon deposit in the United States mail by certified mail, with postage and fees prepaid, addressed to the Holder at the Holder’s address shown in the Company records, and to the Company at its principal executive office.

3.8          Successors and Assigns. The Company may assign any of its rights under this Agreement to single or multiple assignees, and this Agreement shall inure to the benefit of the successors and assigns of the Company. Subject to the restrictions on transfer herein set forth, this Agreement shall be binding upon Holder and the Holder’s heirs, executors, administrators, successors and assigns.

6

3.9                               Clawback.   This Award and the Shares issuable thereunder shall be subject to any clawback or recoupment policy currently in effect or as may be adopted by the Company, as may be amended from time to time.

3.10                        Severability.  If for any reason one or more of the provisions contained in this Agreement or in any other instrument referred to herein, shall, for any reason, be held to be invalid, illegal or unenforceable in any respect, then to the maximum extent permitted by law, such invalidity, illegality or unenforceability shall not affect any other provision of this Agreement or any other such instrument.

3.11                        Titles.  The titles, captions or headings of the Sections herein are inserted for convenience of reference only and are not intended to be a part of or to affect the meaning or interpretation of this Agreement.

3.12                        Counterparts.  This Agreement may be executed in any number of counterparts, any of which may be executed and transmitted by facsimile (including, without limitation, transfer by .pdf), and each of which shall be deemed to be an original, but all of which together shall be deemed to be one and the same instrument.

By Holder’s signature and the Company’s signature below, Holder agrees to be bound by the terms and conditions of the Plan and this Agreement. Holder has reviewed the Plan and this Agreement in their entirety, has had an opportunity to obtain the advice of counsel prior to executing this Agreement and fully understands all provisions of the Plan and this Agreement. Holder hereby agrees to accept as binding, conclusive and final all decisions or interpretations of the Administrator upon any questions arising under the Plan or this Agreement. If Holder is married, Holder’s spouse has signed the Consent of Spouse attached to this Agreement as Exhibit A.

7

EXHIBIT A TO

PERFORMANCE-VESTING RESTRICTED STOCK AGREEMENT

CONSENT OF SPOUSE

I,                                                  , spouse of <@ParticipantName @>, have read and approve the foregoing Agreement and the Plan (as defined in the Agreement). In consideration of issuing to my spouse the shares of the common stock of Guidance Software, Inc. set forth in the Agreement, I hereby appoint my spouse as my attorney-in-fact in respect to the exercise of any rights and taking all actions under the Agreement and agree to be bound by the provisions of the Agreement insofar as I may have any rights in said Agreement or any shares of the common stock of Guidance Software, Inc. issued pursuant thereto under the community property laws or similar laws relating to marital property in effect in the state of our residence as of the date of the signing of the foregoing Agreement or otherwise.  I understand that this Consent of Spouse may not be altered, amended, modified or revoked other than by a writing signed by me and the Company.

Return To:                                            Guidance Software

Human Resources Department

1055 E. Colorado Boulevard

Pasadena, CA 91106

Or Fax To:                                            626-432-9557

A-1