Windows driver memory analysis: A reverse engineering methodology
Searching for processes and threads in Microsoft Windows memory dumps