# procdump

```text
procdump -ma lsass.exe lsass.dmp
```

[http://live.sysinternals.com/procdump.exe](http://live.sysinternals.com/procdump.exe)

[http://live.sysinternals.com/procdump64.exe](http://live.sysinternals.com/procdump64.exe)