Forensic analysis of linux physical memory: Extraction and resumption of running processes.