Logs and Crash Dumps

Windows contains a wealth of logs. You can find them all at: C:\Windows\Logs Additionally, Event Viewer, is a helpful logging tool with a GUI. There is no no need to view these files manually as you can just open Even Viewer. But if you need to, you can find them at: C:\Windows\System32\winevt\Logs

If you want to enable more comprehensive crash dumps and manually cause a crash to catch a full debug report, you can do so with the registry.

Windows Registry Editor Version 5.00
​
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\i8042prt\Parameters]
"CrashOnCtrlScroll"=dword:00000001
​
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\kbdhid\Parameters]
"CrashOnCtrlScroll"=dword:00000001
​
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\CrashControl]
"CrashDumpEnabled"=dword:00000002

Save into an empty file using a name of your choice with the extension .reg. Merge this registry file and reboot. To cause a crash after having an issue, press and hold CTRL then press SCROLL LOCK twice. This will cause a blue screen. As that is the purpose. You are creating a crash to generate a debug report. The blue screen will show MANUALLY_INITIATED_CRASH with code 0x000000E2. Once the computer reboots you have a full memory dump at C:\Windows.