According to NIST 86, which action describes the volatile data collection?