In light of the recent HR intrusion I was wondering if the university had any sort of policy or standard practice that they would like followed for post incident response/forensics. I am currently developing my departments incident response procedures and figured it would be a good idea for them to be inline with what the university expects. Thank you. -- Bryan Murphy Computer/Network Coordinator Plant Research Labs and Plant Biology [log in to unmask] | [log in to unmask]