Crash Dump Files
By default, all Windows systems are configured to attempt to record information about the state of the system when the system crashes. You can see these settings by opening the System Properties tool in Control Panel (under System, Advanced System Settings), clicking the Advanced tab, and then clicking the Settings button under Startup And Recovery. The default settings for a Windows system are shown in Figure 14-4.
Figure 14-4. Crash dump settings
Three levels of information can be recorded on a system crash:
Complete memory dump A complete memory dump contains all physical memory accessible by Windows at the time of the crash. This ...
Get Windows® Internals, Sixth Edition, Part 2 now with the O’Reilly learning platform.
O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.
