error parsing dmp file
Closed this issue · 2 comments
trying to parse the generated dmp file from go,python flavours doesn't work
mimikatz
pypykatz
windbg
Hi @mgff1835 , the Minidump files generated can not be opened using WinDbg (it has never been possible). Regarding Pypykatz and Mimikatz, it depends on the Windows version and the Mimikatz version.
If it is a Windows 11 or Windows Server 2022, you need one of the latest Mimikatz versions. In fact I needed to compile a specific branch to read the Minidumps from my Windows 11 system. I don't know why Pypykatz does not work for Minidumps created with NativeDump, I am not sure if it works for these Windows versions at all.
If you want you can send me an email to ricardojoserf@protonmail.com, I can send you the compiled Mimikatz I use or you can send me the Minidump file so I can analyze it.
Closing the issue, it did not look like a problem with the tool :)