Ellick Chan Shivaram Venkataraman Francis M. David Amey Chaugule Roy H. Campbell Forenscope: a framework for live forensics. 307-316 2010 ACSAC http://doi.acm.org/10.1145/1920261.1920307 conf/acsac/2010 db/conf/acsac/acsac2010.html#ChanVDCC10