Treasure and tragedy in kmem_cache mining for live forensics investigation. - Andrew Case; Lodovico Marziale; Cris Neckar; Golden G. Richard III (Digit. Investig., 2010)