Another good look at Linux system forensics from security focus.

Forensic Analysis of a Live Linux System, Part One

This ones pretty thorough up through the beginning the actual forensic processs.