Fiber Bundle of Memory Space

When complete memory dumps are huge (in case of x64 systems) we can dump specific processes and then force a kernel memory dump. Here we have a product of spaces similar to a fiber bundle illustrated by the following intuitive picture:

- Dmitry Vostokov @ -

One Response to “Fiber Bundle of Memory Space”

  1. Crash Dump Analysis » Blog Archive » ALPC wait chain, missing threads, message box, zombie and special processes: pattern cooperation Says:

    […] purpose of this case study is to show how to choose what to include in a fiber bundle memory dump when x64 complete memory dumps are huge and not an option to […]

Leave a Reply

You must be logged in to post a comment.