Linux Forensics Artefact Guide

Every forensically relevant location on Linux — organised by what you are trying to find. Exact paths, commands, and what each artefact proves. Covers Ubuntu/Debian, RHEL/CentOS, and generic systemd distributions.