This document is an Internet-Draft and is in full conformance with all provisions of Section 10 of RFC2026. Note that other groups may also distribute working documents as Internet Drafts.
Internet Drafts are draft documents valid for a maximum of six months.
Internet Drafts may be updated, replaced, or obsoleted by other documents at any time. All Rights Reserved. The purpose of this document is to provide System Administrators with guidelines on the collection and archiving of evidence. The purpose of this document is to provide System Administrators with guidelines on the collection and archiving of evidence. It's not our intention to insist that all System Administrators rigidly follow these guidelines every time they have a security incident.