Title: Windows Registry Forensics  with Volatility Framework - 3rd Edition