Windows系统环境下基于内存分析的木马病毒取证
郑文庚1, 李凌崴1, 廖广军2

Internal Memory-based Forensics against Trojan Assaulting Windows-operating Computer
ZHENG Wengeng1, LI Lingwei1, LIAO Guangjun2
模拟木马攻击流程图