Richard Bejtlich posts some resources for building an Incident Response Team.