Books by Bruce Nikkel
Practical Linux Forensics
A resource to help forensic investigators locate, analyze, and understand digital evidence found on modern Linux systems after a crime, security incident or cyber attack.