Hegarty, R, Haggerty, J, "SlackStick : signature-based file identification for live digital forensics examinations", , 2016