PUBLICATION: LEMON: A universal eBPF-based volatile memory acquisition tool for modern Android devices and hardened Linux systems
© Elsevier. Personal use of this material is permitted. The definitive version of this paper was published in DFRWS EU 2026, Digital Forensics Research Conference Europe, 24-27 March 2026, Linköping, Sweden and is available at :