Hi Yuhang,<br><br>The first version of Into The Boxes online journal have a article about linux memory forensics, maybe that helps.<br><br><a href="http://intotheboxes.wordpress.com/publication-box/">http://intotheboxes.wordpress.com/publication-box/</a><br>
<br>---<br clear="all">Lu Daohong<br>
<br>