Frank Block, Andreas Dewald. Windows Memory Forensics: Detecting (Un)Intentionally Hidden Injected Code by Examining Page Table Entries. Digital Investigation, 29 Supplement, 2019. [doi]
@article{BlockD19,
title = {Windows Memory Forensics: Detecting (Un)Intentionally Hidden Injected Code by Examining Page Table Entries},
author = {Frank Block and Andreas Dewald},
year = {2019},
doi = {10.1016/j.diin.2019.04.008},
url = {https://doi.org/10.1016/j.diin.2019.04.008},
researchr = {https://researchr.org/publication/BlockD19},
cites = {0},
citedby = {0},
journal = {Digital Investigation},
volume = {29 Supplement},
}