Fork me on GitHub

Kernel memory dump using LiveKd

Prerequisites

Download https://joji.blob.core.windows.net/recipe/livekd.zip and extract it to c:\temp\livekd (or any other directory of your choice).

Main steps

Run CMD as an administrator. If your system is 64-bit, navigate to the x64 subdirectory under the directory where you extracted livekd.zip, for example: c:\temp\livekd\x64. If your system is 32-bit, navigate to c:\temp\livekd\x86. If you have extracted the files to a different directory than c:\temp, please replace the path accordingly.
Execute the following command to create a kernel memory dump.
```
livekd -m -o memory.dmp
```

End steps

You can find the created kernel memory dump: memory.dmp in the directory where you executed the livekd command.