Here's the follow-up to the forensics article I posted below. This time the article focuses on the collection and analysis of data, and references some pretty good resources at the end of the article. Well worth checking out.
Here's the full article.