Nikkel, Bruce (2021). Practical Linux Forensics No Starch Press
Nikkel, Bruce (2016). Practical Forensic Imaging: Securing Digital Evidence with Linux Tools San Francisco, CA: No Starch Press