A one-page overview that Jason Fossen and I created to help Blue Teams at SANS war games. Simple, but helps a lot: http://bit.ly/ePGCO