Virtual Honeypots:
From Botnet Tracking to Intrusion Detection – Niels Provos and Thorsten Holz
Honeypots:
Tracking Hackers – Lance Spitzner
Defense and countermeasures
Offensive Countermeasures: The art of active defense – John Strand and Paul Asadoorian
Blue Team Handbook: Incident Response Edition: A condensed field guide for the Cyber Security Incident Responder
Papers:
A practical guide to Honeypots – Peter Frick and Todd Schiller