1. Carrier, B., 2019. The Sleuthkit. https://www.sleuthkit.org.
2. Carvey, H., 2005. Page smear. http://seclists.org/incidents/2005/Jun/22.
3. Gaslight: A Comprehensive fuzzing architecture for memory forensics frameworks;Case,2017
4. chokepoint, 2019. Azazel is a userland rootkit based off of the original LD_PRELOAD technique from Jynx rootkit. https://github.com/chokepoint/azazel.
5. Digital forensics research: the next 10 years;Garfinkel,2010