chicagocon.com — Free hour & a half audio recording and PPT of Tom Liston's workshop at ChicagoCon based on his work with the SANS Internet Storm Center. Completely break apart a malware case from initial attack to reverse engineering and then through full analysis. It is awesome.