AllTools: dump kernel memory on a live system
AllTools
All reasonably stable tools
CpuStres – thread/CPU stress testing app
DriverMon – monitor any driver activity
GFlagsX – enhanced version of the GFlags tool
Kdump – generate a local kernel dump
Kdump64 – generate a local kernel dump (64 bit)
MetroManager – list (and launch) installed Windows Runtime components and apps
MemMapView – view any process memory (including protected and minimal processes)
NtfsStreams – show NTFS alternate streams in files
ObjDir – command line tool to show object manager namespace
QSlice – modern version of the classic QSlice tool
QSliceX – pie chart graphics for QSlice
PEExplorer – PE file viewer
PoolMon – kernel pool memory allocations
PdbView – view PDB files
ProcMonX – ProcMon-like tool based on Event Tracing for Windows (ETW)
Sysrun – run any executable with the SYSTEM account (no service needed)
Download
git clone https://github.com/zodiacon/AllTools.git
Copyright (c) 2017 Pavel Yosifovich