WinPmem
WinPmem copied to clipboard
Velocidex
The multi-platform memory acquisition tool.
I am trying to use the pcm (performance counter) and using the winpmem driver. I have the following error on the event viewer: The winpmem service failed to start due...
Hello, I have a BSOD immediatly after launching a memory dump on my test machine (Windows 10.0.19044). The BSOD error is SYSTEM_THREAD_EXCEPTION_NOT_HANDLED. This is new. Last tests were in march...
The following project integrates Winpmem to read memory, but some computers do not work. I do not know the reason, and the author is not very clear. It seems that...
 With DbgView.exe，the value of number_of_runs == 50, so dump ram failed here.
Hi all! Curious if you guys have a timeline for a full 4.0 release? What's blocking that?
Hi, We have been using the winpmem.sys drivers to perform memory collections using winpmem.py On newer windows 10 builds we have been getting error 87 parameter is incorrect at the...
Greetings, Report RE: WinPmem 4.0 RC (x64) # Summary: When the pagefile on an Azure virtual machine, located on the secondary disk) is larger than 4GB, winpmem fails to dump....
Built from source on Master, 11/4/20, VS 2019 16.7.1 64bit exe works as expected 32bit exe on 64bit Win 10, version 2004 build 19041.572 (bare hardware) fails with following output:...
I found out there is a couple of checks missing. First: https://github.com/Velocidex/WinPmem/blob/master/kernel/executable/winpmem.cpp#L422 If there is no more space on the disk, WriteFile Fails, then copy_memory fails, then write_raw_image succeed. The...
I did not find this question covered anywhere: can WinPmem dump GPU memory as well? This question actually breaks down into 2: (1) Can it dump _dedicated_ gpu memory on...
