The evidence beyond the wall: Memory forensics in SGX environments