Christopher Wee: Audit logs: to keep or not to keep? Recent Advances in Intrusion Detection 1999