Books by Bruce Nikkel
Practical Linux Forensics
A resource to help forensic investigators locate, analyze, and understand digital evidence found on modern Linux systems after a crime, security incident or cyber attack.
Practical Forensic Imaging
Practical Forensic Imaging takes a detailed look at how to secure digital evidence using Linux-based command line tools.