Crash Dump Files
By default, all Windows systems are configured to attempt to record information about the state of the system when the system crashes. You can see these settings by opening the System tool in Control Panel, clicking the Advanced tab in the System Properties dialog box, and then clicking the Settings button under Startup And Recovery. The default settings for a Windows system are shown in Figure 14-4.
Figure 14-4. Crash dump settings
Three levels of information can be recorded on a system crash:
Complete memory dump A complete memory dump contains all of physical memory at the time of the crash. This type of dump requires that a page ...
Get Windows Internals, Fifth Edition now with the O’Reilly learning platform.
O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.
