Jesse D. Kornblum. Exploiting the Rootkit Paradox with Windows Memory Analysis. IJDE, 5(1), 2006. [doi]
@article{Kornblum06, title = {Exploiting the Rootkit Paradox with Windows Memory Analysis}, author = {Jesse D. Kornblum}, year = {2006}, url = {http://www.utica.edu/academic/institutes/ecii/publications/articles/EFE2FC4D-0B11-BC08-AD2958256F5E68F1.pdf}, tags = {analysis}, researchr = {https://researchr.org/publication/Kornblum06}, cites = {0}, citedby = {0}, journal = {IJDE}, volume = {5}, number = {1}, }