Windows driver memory analysis: A reverse engineering methodology
Forensic carving of network packets and associated data structures