A Simple Software Security Guy at Microsoft!
CERT has released a Web-based library for information assurance, forensics and incident response. I've poked around, it looks pretty good.
http://vte.cert.org/