Advances in memory forensics