Volatile memory acquisition using backup for forensic investigation. - Farhood Norouzizadeh Dezfouli; Ali Dehghantanha; Ramlan Mahmoud; Nor Fazlida Binti Mohd Sani; Solahuddin bin Shamsuddin (CyberSec, 2012)