An OS-agnostic approach to memory forensics