


Bug check dumps can also be manually triggered using tools such as Microsoft's own Sysinternals NotMyFault tool. Bug checks create dumps in the default Windows directory. A bug check happens whenever the OS crashes due to faulty hardware or software. Generally, kernel dumps are created during what is known as a "bug check" or "Stop error". Dumps are written to %LocalAppData%\Microsoft\Windows\TaskManager\LiveKernelDumps. This allows developers to capture a live kernel memory dump while the OS continues to work. In the recently released Insider Preview Build 25276, it is now possible to generate a live kernel memory dump for kernel mode processes such as System simply by right clicking and choosing the appropriate dump required. This build brings with it changes to the Task Manager, availability of Apple apps previews in the Microsoft Store, and several other changes.įor those not aware, Task Manager already allows creation of memory dumps for user mode processes while this option is greyed out for kernel mode processes. Microsoft recently released Windows 11 Insider Preview Build 25276 to the Dev Channel.
