Windows NT pagefile.sys Virtual Memory Analysis
a hardware - based memory acquisition procedure for digital investigations .