Environment
- App Control Agent: All Supported Versions
- Microsoft Windows: All Supported Versions
Objective
How to enable local dumps on Windows endpoints when parity.exe crashes.
Resolution
- Open regedit.exe
- Open the key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps
- Create the registry key LocalDumps if it is not present already.
- Create a new "expandable string value " (REG_EXPAND_SZ) and named it DumpFolder
- Double click on the "DumpFolder " value and enter the following string for the "value data": %LOCALAPPDATA%\CrashDumps
- Wait for the crash to happen and once then grab the parity .dmp files from the path %LOCALAPPDATA%\CrashDumps
Additional Notes
If the parity .dmp files are missing in %LOCALAPPDATA%\CrashDumps,please look for them in the following path C:\Windows\System32\config\systemprofile\AppData\Local\CrashDumps
Related Content