linux explorer: live forensics toolbox for Linux endpoints