Windows Registry Forensics (WRF) with Volatility Framework - 3rd Edition