Crash Dump Files

By default, all Windows systems are configured to attempt to record information about the state of the system when the system crashes. You can see these settings by opening the System Properties tool in Control Panel (under System, Advanced System Settings), clicking the Advanced tab, and then clicking the Settings button under Startup And Recovery. The default settings for a Windows system are shown in Figure 14-4.

Crash dump settings

Figure 14-4. Crash dump settings

Three levels of information can be recorded on a system crash:

  • Complete memory dump A complete memory dump contains all physical memory accessible by Windows at the time of the crash. This ...

Get Windows® Internals, Sixth Edition, Part 2 now with O’Reilly online learning.

O’Reilly members experience live online training, plus books, videos, and digital content from 200+ publishers.