https://github.com/memflow/memflow-coredump

memflow connector backend for microsoft windows coredump files
https://github.com/memflow/memflow-coredump

Last synced: 3 months ago
JSON representation

memflow connector backend for microsoft windows coredump files

• Host: GitHub
• URL: https://github.com/memflow/memflow-coredump
• Owner: memflow
• License: mit
• Created: 2020-07-26T14:38:04.000Z (over 4 years ago)
• Default Branch: main
• Last Pushed: 2024-04-03T21:23:24.000Z (10 months ago)
• Last Synced: 2024-10-11T05:56:11.989Z (4 months ago)
• Language: Rust
• Size: 118 KB
• Stars: 7
• Watchers: 2
• Forks: 1
• Open Issues: 0
• Metadata Files:
  • Readme: README.md
  • License: LICENSE

Awesome Lists containing this project

• awesome-qubes-os - Coredump - Access Microsoft Windows Coredump files. (Exploitation Tools / Unikernel-like)

README

        
# memflow-coredump

The `coredump` connector implements the Microsoft Windows Coredump format for 32-bit and 64-bit Coredump files. It implements support for full core dumps (type 1) and partial bit mapped core dumps (type 5).

## Compilation

### Installing the library

The recommended way to install memflow connectors is using [memflowup](https://github.com/memflow/memflowup#memflowup---memflow-setup-tool).

### Development builds

To compile the connector as dynamic library to be used with the memflow plugin system use the following command:

```

cargo build --release --all-features

```

The plugin can then be found in the `target/release/` directory and has to be copied to one of [memflows default search paths](https://github.com/memflow/memflow/blob/main/memflow/src/plugins/mod.rs#L379).

### Linking the crate statically in a rust project

To use the connector in a rust project just include it in your Cargo.toml

```

memflow-coredump = "0.2"

```

## Arguments

The `target` argument specifies the filename of the coredump file to be opened.

## License

Licensed under MIT License, see [LICENSE](LICENSE).

### Contribution

Unless you explicitly state otherwise, any contribution intentionally submitted for inclusion in the work by you, shall be licensed as above, without any additional terms or conditions.