US8424094B2 - Automated Collection of Forensic Evidence Associated with a Network Security Incident