@inproceedings{Hargreaves2008,
  title = "{Avoiding live imaging of large encrypted volumes by recovering keys from memory.}",
  author = "Hargreaves, Christopher and Chivers, Howard",
  year = "2008",
  address = "Liverpool",
  booktitle = "Advanced in Digital Forensics and Security",
}