Extract process dump from full memory dump
问题 I've reached a bug, but I was unable to create a process dump. I've created a full memory dump of system. How could I extract a process dump using it? Windows . 回答1: You cannot. In general, some of the memory segments that belong to your process could be paged out and not resident in physical memory. This means that with full kernel memory dump you are not guaranteed to reconstruct process address space. In many cases you can extract useful information about process from kernel dump. However