Post-mortem path correlation based on the NT Object Manager in Windows 1x systems. - Dominic Helfer; Felix Rothe; Ronny Bodach (GI-Jahrestagung, 2023)