1. A method for capturing select internal objects from a computer system, comprising: registering a user-customized filter function with a kernel of the computer system, the filter function filtering one or more categories of internal objects in a single serialized pass, the filter function being installed into a kernel extension, the kernel extension including a module capable of being loaded onto and unloaded from a running computer system without needing to reboot the computer system, the kernel extension being configured to interact with the kernel of the computer system, and the kernel being programmed to capture internal objects in the computer system, passing internal objects in the computer system through the filter-function while the computer system is in an active state, and the single serialized pass that captures the internal objects that satisfy the filter function occurring at a common point in time.