Environment
- All Products
- Carbon Black Cloud
- App Control
- EDR
- Microsoft Windows: All Supported Versions
- Apple macOS: All Supported Versions
- Linux: All Supported Versions
- VMware virtual appliance
Objective
Create a memory dump from a snapshot of a machine running on VMware virtualization software
Resolution
- Reproduce the issue the needs to be captured in the dump
- Follow the steps documented in VMware Knowledge Base
- Upload resulting dump to CB Vault
- Update the Support case once the upload is complete
Additional Notes
Memdumps from a snapshot are useful in situations where the machine is in a hung state and a dump cannot be triggered.
