1. Sinowal: MBR rootkit never dies!;Aallievi,2012
2. Art of memory forensics supplementary materials;AMF,2015
3. iSeeYou: disabling the MacBook webcam indicator led;Brocker,2014
4. Mac memory analysis with Volatility;Case,2012
5. Hunting mac malware with memory forensics;Case,2014