Extraction of memory forensic artifacts from windows 7 RAM image - Thomas, Sunu; Sherly, K. K.; Dija, S. (2013 IEEE Conference on Information and Communication Technologies, 2013)
Keywords: Computers; Conferences; CR3 register; Data mining; EPROCESS; Forensics; Kernel; KPCR; Memory Forensics; Random access memory; Windows 7