---

Breach detection with Linux filesystem forensics

The who, what, when, where, why, and how of investigating a Linux disk image.