Don't have Telegram yet? Try it now!
https://www.andreafortuna.org/2016/05/31/par-osterberg-medina-detecting-rootkits-in-memory-dumps/
Pär Österberg Medina: Detecting Rootkits in Memory Dumps