Extract user name from memory dump with windbg

Question

I would like to retrieve the name of the user that was signed in when the dump was created. Is that possible to do with windbg? I did some searching and couldn't find anything.

score 2 · Accepted Answer · answered Aug 21 '13 at 04:04

2

try this command:

!envvar USERNAME

This reads the Environment-variable username which is filled by the system.

answered Aug 21 '13 at 04:04

magicandre1981

99,606

Extract user name from memory dump with windbg

1 Answers1