Forensic Analysis of Container Snapshot Chains for Post-Event Reconstruction [pdf]
radostin.io