Derandomizing Kernel Address Space Layout for Memory Introspection and Forensics
On the effectiveness of address-space randomization