PUBLICATION: Advances in memory forensics © EURECOM. Personal use of this material is permitted. The definitive version of this paper was published in Thesis and is available at : Document