RFC 3227 (Request for Comments 3227)

Also written: RFC 3227

The Internet Engineering Task Force's published guide to collecting evidence. It gives the order of volatility and warns about deadman switches.

Where the book teaches it