The practice of network security monitoring understanding incident detection and response - Bejtlich, Richard (No Starch Press, 2013)
Includes index