Extracting Forensic Artifacts from Windows O/S Memory, James S. Okolica, Gilbert L. Peterson
AFIT Documents