CHAPTER Monitoring Enclaves 9 INFORMATION IN THIS CHAPTER: l Determining What to Monitor Successfully Monitoring Enclaves Information Management Log Storage and Retention l l l The first step of information analysis requires a certain degree of information col- lection, so that there is a healthy body of data to assess. Collecting information rel- evant to cyber security requires knowing what to monitor and how to monitor it. Unfortunately, there is a lot of information that could be relevant to cyber secu-