I'm biased on this one, and it's a little outdated, but Mandia's book is pretty good too: http://www.amazon.com/Incident-Response-Computer-Forensics-S...
I'm biased on this one, and it's a little outdated, but Mandia's book is pretty good too: http://www.amazon.com/Incident-Response-Computer-Forensics-S...