13cubed Investigating Windows Memory, This is an excellent opportunity to get some hands-on practice with Windows memory forensics.