Windows 10 brings a new type of memory dump: Active Memory Dump. I love this feature, just what I’ve been waiting for.
To analyze the Windows 10 Technical Preview Dump files ensure you have the symbols from http://msdn.microsoft.com/en-us/windows/hardware/gg463028.aspx
This memory dmp is much more compact that a complete memory dump, while containing “active memory” in kernel and user mode space.
more here.........http://chentiangemalc.wordpress.com/2014/10/02/windows-10active-memory-dump/
To analyze the Windows 10 Technical Preview Dump files ensure you have the symbols from http://msdn.microsoft.com/en-us/windows/hardware/gg463028.aspx
This memory dmp is much more compact that a complete memory dump, while containing “active memory” in kernel and user mode space.
more here.........http://chentiangemalc.wordpress.com/2014/10/02/windows-10active-memory-dump/