Outside of security stuff, over the years I've found this really handy for troubleshooting as well. Being able to extract detailed process info, screenshots, and a bunch of other things from a memory dump have allowed me to get a better idea of what a user was doing when a Windows BSOD occurred.
It builds more a nice picture of what was going on when paired with the users description. Or sometimes, depending on the user, you just don't have anything else to go on besides "it crashed".
Outside of security stuff, over the years I've found this really handy for troubleshooting as well. Being able to extract detailed process info, screenshots, and a bunch of other things from a memory dump have allowed me to get a better idea of what a user was doing when a Windows BSOD occurred.
It builds more a nice picture of what was going on when paired with the users description. Or sometimes, depending on the user, you just don't have anything else to go on besides "it crashed".
Whashodi?