nanodump: creates a minidump of the LSASS process
NanoDump A Beacon Object File that creates a minidump of the LSASS process. Features It uses syscalls (with SysWhispers2) for most operations You can choose to download the dump without touching...
Tagged: .NET memory dumps
turdshovel: dump objects from .NET memory dumps
turdshovel Turdshovel is an interactive CLI tool that allows users to dump objects from .NET memory dumps without having to fully understand the intricacies of WinDbg. It uses Python.NET to wrap around ClrMD and...
