SharpDump icon indicating copy to clipboard operation
SharpDump copied to clipboard

Encrypt and compress the MiniDump in memory before touching disk

Open hfz1337 opened this issue 8 months ago • 0 comments

  • [x] Added some refactoring.
  • [x] Added a callback function for MiniDump in order to encrypt the dump in memory. This solves the issue where the dump is flagged as Trojan:Win32/LsassDump.A. With this approach we make sure that the real dump never touches the disk.
  • [x] Added randomization to the filename.

The user will have to gunzip and decrypt the dump before it can be used (the current encryption scheme is a simple memfrob, but it can be customized by the user).

hfz1337 avatar Apr 15 '25 01:04 hfz1337