The default location for the resulting crash dump file is C:\Windows\Memory.dmp
Resulting memory dumps can be provided to Carbon Black using CB Vault.
This process is useful in situations where the endpoint is unresponsive (ie, "hung")
Some keyboards (such as on some laptop models) may not have a SCROLL LOCK button. If this is the case, it's recommended to plug in an external keyboard that has that key and trigger the crash dump that way.
Alternatively, if an external keyboard is not available, the hex values in the reg files can be modified to represent other available keys.