Andreas Schuster. Pool Allocations as an Information Source in Windows Memory Forensics. In Oliver Göbel, Dirk Schadt, Sandra Frings, Hardo Hase, Detlef Günther, Jens Nedon, editors, IT-Incidents Management & IT-Forensics - IMF 2006, Conference Proceedings, October, 18th-19th, 2006, Stuttgart. Volume 97 of LNI, pages 104-115, GI, 2006.
Abstract is missing.