Live memory forensics over IEEE 1394 (\