In reality this is of course Memory Analysis -  Step 6 - Dump Suspicious Processes and Drivers. Actually it's more like dump all processes and drivers and let you work out which ones are interesting. Output now goes to {OUTPUT_LOCATION}.