13cubed Investigating Windows Memory, in/daTif4C7 #DFIR #digitalforensics # .