Tools (Linux IRT)

https://github.com/fox-it/dissect

quick access and analysis of various disk and file formats

https://github.com/fkie-cad/ryoshi

Detec hidden files (hidden by rootkits)