我记得我曾经看过Mark Russinovich的网络广播，其中显示了用户启动的内核转储的键盘按键顺序。有人可以按按键的确切顺序刷新我的记忆。

请注意，这是针对XP的。

解决方案

回答

我不知道有没有键盘快捷键，但是当我们右键单击某个进程并选择"创建转储"时，我们是否正在任务管理器中寻找？

回答

据我所知，"创建转储"命令仅添加到Vista中的任务管理器中。我唯一知道的执行此操作的方法是使用调试工具随附的adplus VBScript。缺少与dbghelp挂钩并自己以编程方式进行的操作。

回答

http://psacake.com/web/jr.asp包含完整的说明，以下是摘录：

While it may seem odd to think about purposefully causing a Blue Screen Of Death (BSOD), Microsoft includes such a provision in Windows XP. This might come in handy for testing and troubleshooting your Startup And Recovery settings, Event logging, and for demonstration purposes.

Here's how to create a BSOD:

Launch the Registry Editor (Regedit.exe).
Go to HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\i8042prt\Parameters.
Go to Edit, select New | DWORD Value and name the new value CrashOnCtrlScroll.
Double-click the CrashOnCtrlScroll DWORD Value, type 1 in the Value Data textbox, and click OK.
Close the Registry Editor and restart Windows XP.
When you want to cause a BSOD, press and hold down the [Ctrl] key on the right side of your keyboard, and then tap the [ScrollLock] key twice. Now you should see the BSOD.

If your system reboots instead of displaying the BSOD, you'll have to disable the Automatically
Restart setting in the System Properties dialog box. To do so, follow these steps:

Press [Windows]-Break.
Select the Advanced tab.
Click the Settings button in the Startup And Recovery panel.
Clear the Automatically Restart check box in the System Failure panel.
Click OK twice.

Here's how you remove the BSOD configuration:

Launch the Registry Editor (Regedit.exe).
Go to HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\i8042prt\Parameters.
Select the CrashOnCtrlScroll value, pull down the Edit menu, and select the Delete command.
Close the Registry Editor and restart Windows XP.
Note: Editing the registry is risky, so make sure you have a verified backup before making any changes.

我以为我们想要BSOD可能是错误的，所以这是一个Microsoft Page，显示了如何捕获内核转储：
https://web.archive.org/web/20151014034039/https://support.microsoft.com/fr-ma/kb/316450

回答

我们可以使用快捷键从Microsoft设置用户转储工具以转储进程。但是，这是用户进程转储，而不是内核转储...