@inproceedings{LogenHoefkenSchuba2012,
  author    = {Logen, Steffen and H{\"o}fken, Hans and Schuba, Marko},
  title     = {Simplifying RAM Forensics : A GUI and Extensions for the Volatility Framework},
  series = {2012 Seventh International Conference on Availability, Reliability and Security (ARES), 20-24 August 2012, Prague, Czech Republic},
  booktitle = {2012 Seventh International Conference on Availability, Reliability and Security (ARES), 20-24 August 2012, Prague, Czech Republic},
  publisher = {IEEE},
  address   = {New York},
  isbn      = {978-1-4673-2244-7},
  doi       = {10.1109/ARES.2012.12},
  pages     = {620 -- 624},
  year      = {2012},
  abstract  = {The Volatility Framework is a collection of tools for the analysis of computer RAM. The framework offers a multitude of analysis options and is used by many investigators worldwide. Volatility currently comes with a command line interface only, which might be a hinderer for some investigators to use the tool. In this paper we present a GUI and extensions for the Volatility Framework, which on the one hand simplify the usage of the tool and on the other hand offer additional functionality like storage of results in a database, shortcuts for long Volatility Framework command sequences, and entirely new commands based on correlation of data stored in the database.},
  language  = {en}
}
@article{SchubaHoefken2012,
  author    = {Schuba, Marko and H{\"o}fken, Hans},
  title     = {Backtrack5: Datensammlung und Reporterstellung f{\"u}r Pentester mit MagicTree / H{\"o}fken, Hans ; Schuba, Marko},
  series = {Hakin9. 73 (2012), H. 3},
  journal   = {Hakin9. 73 (2012), H. 3},
  publisher = {-},
  isbn      = {1733-7186},
  pages     = {12 -- 16},
  year      = {2012},
  language  = {de}
}