Home › SymptomIndependent guide

Where to Find Windows Blue Screen Logs and Dump Clues

Event Viewer and minidumps can help establish crash timing and bug-check parameters. A log entry or named module is a clue, not a complete diagnosis.

Protect your files first

Back up important files when possible. If the drive is encrypted, locate the BitLocker recovery key before recovery changes. Stop if storage appears to be failing or this is a work or school managed PC.

Advertisement

What to record

Crash time, Event Viewer provider and Event ID, BugcheckCode field, and whether a minidump was created.

The exact message, Windows version, and whether the desktop still opens matter more than a guess based on the symptom name.

Try these safer checks

Use Event Viewer for the System log and Reliability Monitor for the timeline. If a dump exists, open it locally with official WinDbg and record !analyze -v output.

Change one thing at a time. After each check, see whether the same symptom returns and write down what changed.

Advertisement

When to stop and get help

Do not upload raw dumps or recovery keys to a public site. Avoid Driver Verifier as a first-line consumer check.

If this is a work or school device, contact its administrator before changing managed settings.

Keep track of your checks

This checklist stays in this browser session. It is not sent to WinErrors.

Advertisement

Related help

Advertisement

Official references