Topic created on: March 16, 2010 09:34 CDT by joejeff.
Hi
Does somebody know an application which is able to dump the complete state of a process and later reloads it and continues execution? Like a VM snapshot but per process.
Yes, hibernating the process is another way to call it. Though hibernate is a bit more specific... in hibernation you can throw certain state which you know you can rebuild under the assumption that whatever you are hibernating can be resumed back. Snapshots are more general.
Look at the proceedings of the recent CanSecWest 2010 conference, in particular the "Full Process Analysis and Reconstitution of a Virtual Machine from the Native Host" presentation by Jamie Butler. A summary of it can be found here:
http://www.sophos.com/blogs/chetw/g/2010/03/30/cansecwest-2010-day-3-summary/
Essentially Jamie described a technique by which he derived process state from a VM snapshot.
i don't know if it is addressing your query, but I recall Pydbg debugger which has a method for taking snapshot of the running process and later resume the process from that point onwards. it is: pydbg.process_snapshot()
Note: Registration is required to post to the forums.