[Vol-users] malware memory forensics using volatility