1. FACE: automated digital evidence discovery and correlation;Case,2008
2. PyFlag – an advanced network forensic framework;Cohen,2008
3. Exploiting the rootkit paradox with Windows Memory Analysis;Kornblum;International Journal of Digital Evidence,2006
4. Using every part of the buffalo in Windows Memory Analysis;Kornblum;Digital Investigation,2007