On-the-Identification-of-Information-Extracted-from-Windows-Physical-Memory