To defend against the new attacks, the researchers advise memory forensics as the number one way of spotting ToneShell ...