Memory Forensics: What RAM Reveals