Practical Linux Forensics
Bruce Nikkel
The Linux Programming Interface
Michael Kerrisk
Designing BSD Rootkits
Joseph Kong