Skip to main content

From Crash to Compromise: Unlocking the Potential of Windows Crash Dumps in Offensive Security

Windows crash dump files, frequently overlooked in offensive contexts despite their forensic value, contain several sensitive elements that threat actors can exploit for privilege escalation, credential harvesting, lateral movement, and data exfiltration.

sans-jason-mull-from-crash-compromise (PDF, 1.83MB)

9 May 2025
BySANS Institute
Share
All papers are copyrighted

No re-posting of papers is permitted

Related Content

Subscribe to GIAC’s Monthly Newsletter

Receive expert insights, priority access to certifications, essential updates on regulatory changes and industry developments.