$ 0 0 UNIX and Linux Forensic Analysis by Pogue, Chris, Altheide, Cory and Haverkos, Todd (Jul 24, 2008)