For example procdump.exe
sadmin recover
sadmin so “folder-path containing procdump.exe”
sadmin features disable execution-control
Collect process dump for sc:
Open a new command prompt window and change directory to folder containing procdump.exe. Run “procdump.exe -t sc.exe”
sadmin config set pullinvlastaccesstime=default
sadmin config set invdifflastaccesstime=default
sadmin check -r
sadmin ls -rax > C:\inv.xml
sadmin features enable execution-control
sadmin lockdown