How to analize memory dump file after BSOD

Recently, there was a massive failure of Windows-based systems, which led to the shutdown of many companies and their services. 

The reason was the update of CrowdStrike’s cyberattack protection system. 

In this article, I will look at how to analyze a dump file that is created by default after BSOD (Blue Screen of Death or blue screen of death is a critical error in Windows).

To start the analysis, we need two things. 

1. Install the debugger. You can download it from the link

2. Copy the dump file from the failed machine. He is always in C:\Windows\memory.dmp.

After installation, run the WinDbg program. 

In the window that appears, open the dump file. 

After downloading the dump file, a command prompt will appear. Run the command:

!analyze -v

After executing the command, we read the error analysis and what led to the problem.

👇👇👇
💬Discuss or ask a question in the Telegram💬

Читать эту же статью на русском 👉 https://dzen.ru/a/Zpzqh71aml1ilv1E


Posted

in

by

Tags: