https://www.hackingarticles.in/digital-forensics-investigation-os-forensics-part-2/
Digital Forensics Investigation through OS Forensics (Part 2)