Explanation:
The description and format of the event log differs from the format that is displayed when the computer is writing the Memory.dmp file, but the majority of the information is the same. Below is an example of the event log:
Event ID: 1001
Source: Save Dump
Description:
The computer has rebooted from a bugcheck. The bugcheck was : 0xc000021a (0xe1270188, 0x00000001, 0x00000000, 0x00000000). Microsoft Windows NT (v15.1381). A dump was saved in:
3:/WINNT/MEMORY.DMP.
Reference:
Microsoft Knowledge Base Article – 192463, Gathering Blue Screen Information After Memory Dump in Windows 2000 or Windows NT

---