RT @davehull: Uncident Response - @mikecloppert SANS Forensics blog: http://blogs.sans.org/computer-forensics/2010/02/07/uncident-response/