Accidentally ran rm on a massive log file or a database while a process was still writing to it? Before you panic, learn how to use lsof to find the 'ghost' file in the /proc filesystem and snatch your data back.