Super,

Incident Responce was written by the foundstone group. The same that put out hacking exposed. They have alot of information on their website "www.foundstone.com". If you would like some directly out of the book, just let me know. I usually check sites like "ntsecurity.nu & securityfocus.com for information" Other good sources are SANS for tutorials & white pages, and NSA for tips and guides on securing NT systems.