low overhead capture of active threads, without memory dump?

PowerShellMafia / PowerSploit

PowerSploit - A PowerShell Post-Exploitation Framework

Other

11.77k stars 4.59k forks source link

low overhead capture of active threads, without memory dump? #300

Open eostermueller opened 6 years ago

eostermueller commented 6 years ago

I'm troubleshooting a server with System/Kernel/Priveleged CPU that is 2x that of user CPU -- big problem. Would like to capture stack traces of all threads WITHOUT high overhead of capturing memory dump. Any suggestions on how to make that happen?

Thanks, --Erik