/app/forensics/
../
rkhunter