Windows driver memory analysis: A reverse engineering methodology
forensic analysis of the windows registry in memory .