Advances in volatile memory forensics. (March 2017) - Schatz, Bradley; Cohen, Michael