./xdumpgo convert repaired.dump --to volatility3 --output final.dump
Create a config file quality.json:
"min_region_size": 4096,
"exclude_guard_pages": true,
"require_executable_checksum": true,
"max_hole_ratio": 0.01,
"prefer_contiguous": true
Run:
./xdumpgo dump --pid 1234 --config quality.json --output elite.dump
head -n 5 dump_quality.txt tail -n 5 dump_quality.txt xdumpgo tutorial extra quality
xdumpgo -a 0 -w 16 <file>
./xdumpgo dump \
--pid 1234 \
--output high_quality.dump \
--full-page \
--ignore-paged \
--preserve-perms \
--verify-checksum \
--thread-sync
| Flag | Purpose |
|------|---------|
| --full-page | Dump entire pages, not just requested ranges |
| --ignore-paged | Skip swapped-out pages (prevents corrupted data) |
| --preserve-perms | Store original memory permissions |
| --verify-checksum | Calculate SHA256 after dump |
| --thread-sync | Suspend threads during dump (atomic snapshot) | Create a config file quality