I want to publish a crash dump on the Internet for other people to learn from the dump. Usually I take dumps with
.dump /ma which is fine.
However, I'm a bit concerned about personal data included in the dump and I'd like to remove it. The WinDbg help file specifies the
R (this part is clear for me):
Deletes the full module paths from the minidump. Only the module names will be included. This is a useful option if you want to protect the privacy of the user's directory structure.
r (I don't fully understand how that protects privacy of other applications):
Deletes from the minidump those portions of the stack and store memory that are not useful for recreating the stack trace. Local variables and other data type values are deleted as well. This option does not make the minidump smaller (because these memory sections are simply zeroed), but it is useful if you want to protect the privacy of other applications.
Which options should I use to re-dump to get a dump without personal information? Are there any other switches I should activate?
- it's a user mode dump
- the application itself does not store any sensitive data, so it's basically ok to deliver full memory.
I'm especially interested in removing the process environment block so that
!peb does not show all the system information.