Live from the PaulDotCom Security Weekly Studio....
Email: psw@pauldotcom.com(Bandwidth provided by OSHEAN)
- Want to register for any SANS conference? Please visit http://www.pauldotcom.com/sans/ for our referral program.
- Sponsored by Core Security, listen for the discount code at the end of the show
- Sponsored by Syngress, be the first to post the answer to the question at the end of the show and win a free book!
- Please go update our frapper map!
- Want some cool PaulDotCom Gear? Do you hack naked? Check out our Cafepress Store!
- Full Show Notes
Email: psw@pauldotcom.com
Audio Feeds: 
According to NIST pub 800-92, Guide to Computer Security Log Management, logs for high-impact systems should be retained for 3 to 12 months. When stored, they should be encrypted (this seems rather obvious...) and they should be rotated every 15-60 minutes or 500KiB-1MiB.
I'm the guy in the red psw t-shirt, I am English, the guy with me was Sweedish!
Thanks for the shout though.
PS Nice to meet you guys, thanks for the free stuff!