OSSEC host-based intrusion detection guide - Hay, Andrew. (Syngress Pub., 2008)
Includes index.