Process Dumps without installing the full Debugging Tools for Windows
2018-04-06
During the course of various investigations, the need sometimes arises to collect Process dumps for analysis. There are various ways of doing this, using tools such as ProcDump, but I still like using ADPlus. Unfortunately to obtain ADplus you need to download and install the Debugging Tools for Windows, which are now part and parcel with the WDK, SDK or you can use the Visual Studio debugger. Getting the average customer/end user to install that is difficult, it can involve things like change control. Due to this, I decided to try and find out what was the bare minimum needed to generate ADPlus process dumpsRead More →