Characterizing Data Structures for Volatile Forensics. - Ellick Chan; Shivaram Venkataraman; Nadia Tkach; Kevin Larson; Alejandro Gutierrez; Roy H. Campbell (SADFE, 2011)