diff --git a/yml/OtherMSBinaries/Procdump.yml b/yml/OtherMSBinaries/Procdump.yml index 65cbb04..6cdafe7 100644 --- a/yml/OtherMSBinaries/Procdump.yml +++ b/yml/OtherMSBinaries/Procdump.yml @@ -1,8 +1,10 @@ --- -Name: Procdump(64).exe +Name: Procdump.exe Description: SysInternals Memory Dump Tool Author: 'Alfie Champion (@ajpc500)' Created: '2020-10-14' +Aliases: + - Procdump64.exe Commands: - Command: procdump.exe -md calc.dll explorer.exe Description: Loads calc.dll where DLL is configured with a 'MiniDumpCallbackRoutine' exported function. Valid process must be provided as dump still created.