The Linux Programming Interface
Michael Kerrisk
Designing BSD Rootkits
Joseph Kong
Practical Linux Forensics
Bruce Nikkel