Docker memory forensics article

Interesting article on gbetting memory forensics of linux.  Actually I like the command pstree it talks about (which seems to be a standard command in linux now).

https://isc.sans.edu/diary/Forensicating+Docker%2C+Part+1/20835