Linux Namespaces: Where Evidence Hides The filesystem view you get from the host is not necessarily the view the suspect process has. This guide covers enumerating namespaces, entering them with nsenter and spotting mount namespace evasion. https://www.halkynconsulting.co.uk/a/2026/10/linux-namespaces-forensics/