Data hiding techniques in Windows OS : a practical approach to investigation and defense - Hassan, Nihad Ahmad (Syngress, 2016)