US20030191962A1 - System, method and program product for automatically collecting state information for computer system intrusion analysis