Forensic Fails - Shift + Delete Won't Help You Here
Advanced memory forensics: the cold boot attacks
Forensic Imager Tools: You don't have the Evidence
Anti-Forensics and Anti-Anti-Forensics Attacks