Books by Richard Bejtlich
The Practice of Network Security Monitoring
The Practice of Network Security Monitoring teaches IT and security staff how to leverage powerful NSM tools to identify threats quickly and effectively.