From e1745903b76f7fbaa9817e1f3b247730192cee17 Mon Sep 17 00:00:00 2001 From: Mastercodeon Date: Mon, 30 Jan 2023 19:31:07 -0600 Subject: [PATCH] Readme update --- README.md | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/README.md b/README.md index 370d782..d45f927 100644 --- a/README.md +++ b/README.md @@ -44,6 +44,10 @@ If the splash screen shuts down saying it failed to start the driver, please pos **Note2**: Even though it can dump both x86 & x64 processes, this has to run on x64 Windows. ## Disclaimer +The new kdu provider scanner will sometimes crash windows with a BSOD when a provider goes bad loading the KsDumper driver. +In the event windows does crash while ksdumper is scanning for providers, just restart and rerun KsDUmper. +It will pickup where it left off scanning and skip the provider that just crashed it. The presence of Scanning.txt is what tells you of KsDumper was in the middle of a provider scan that it has to finish. + Due to the nature of how KDU works to map the kernel driver, it is unknown if the system you run this on will have a exploitable driver according to kdu providers. If you try to boot KsDumper 11 and it fails to start the driver, trying again as administrator.