During a forensic examination of a Windows 10 workstation, an analyst wants to recover fragments of application data that were resident in RAM but written to a location on disk when physical memory ran low. Which operating system component should the analyst examine to find this data?