Type Windows Mini Dump
Jump to navigation
Jump to search
| Defined Constant | Type_Windows_Mini_Dump
|
| File Type Value | 511 |
| Parent Type | None |
| Carve | Yes |
| Format Details | Yes |
| Carve Meta Data | Yes |
| MIME Type | application/octet-stream
|
| Filename Extension | dmp
|
Windows Mini Crash Dump
Description
Windows application crash dump
Truxton Exploiters
This file type is handled by the following ETLs:
Items Produced
Truxton will extract the following from this file type:
Carve Meta Data
When Truxton carves this file, it can populate the following columns in the [File] table:
Created- When the file was created
