Unearthing Linux: A Forensic Journey Through the Filesystem

Linux is famous for the philosophy that "everything is a file". But when you stop viewing the filesystem as just a place to store data and start looking at it as a live, interactive map of the kernel'