Supporting velocity of investigation with behavior analysis of malware. - Rich Nolan; Peter P. Chen (CSIIRW, 2011)