Extracting Windows Event Logs Using Memory Forensics