https://ricaldocs.github.io/posts/linux-incident-response-and-forensics/