JSI Tip 10057. The User Mode Process Dumper (userdump) dumps any running Win32 processes memory image on the fly, without attaching a debugger, or terminating target processes.
Jerold Schulman
January 12, 2006
1 Min Read
The Microsoft Download Center User Mode Process Dumper Version 8.0 page contains the following overview:
The User Mode Process Dumper (userdump) dumps any running Win32 processes memory image (including system processes such as csrss.exe, winlogon.exe, services.exe, etc) on the fly, without attaching a debugger, or terminating target processes. Generated dump file can be analyzed or debugged by using the standard debugging tools.
The userdump generates dump file by several triggers;
Dump by specifying PID or process name from command line
Dump automatically when process being monitored caused exceptions
Dump automatically when process being monitored exited
Dump by pressing hot key sequence
About the Author
Sign up for the ITPro Today newsletter
Stay on top of the IT universe with commentary, news analysis, how-to's, and tips delivered to your inbox daily.
You May Also Like