Winnie has collected the physical evidence of an attack on her company’s Web site, including the Web server, hard disk drives, site traffic and firewall logs. Which less tangible evidence could be lost?

A.
ISP router records

B.
IP address traceroute data

C.
User authentication data

D.
System data stored in RAM