Skip to content

Releases: airbus-cert/ttd2mdmp

First release

31 Jul 07:37
b71fa16
Compare
Choose a tag to compare

📽️ Extract Minidump from TTD trace at a given position

Select a position with:

⌚ A TTD cursor
🪝 A function hook

Information extracted:

🧵 Threads:

  • Thread id
  • Thread stack range
  • Thread stack
  • Thread context
  • TEB

🧩 Modules:

  • Module name
  • Module memory range
  • Module memory

📑 Heap

  • Heap ranges generated by tracing ntdll!NtAllocateVirtualMemory calls
  • Heap memory

⚙️ System Information

  • Processor architecture

Full Changelog: https://github.com/airbus-cert/ttd2mdmp/commits/v1.0.0