http://strony.aster.pl/forensics/pdf/mburdach_digital_forensics_of_physical_memory.pdf