https://koalaking.pages.dev/posts/linux-and-disk-forensics-80541/