Designing BSD Rootkits
Joseph Kong
The Linux Programming Interface
Michael Kerrisk
Practical Linux Forensics
Bruce Nikkel