A Method for Detecting Windows Rootkits. - Douglas R. Wampler; James H. Graham (CATA, 2008)