In general, in one aspect, the invention relates to a method for identifying lock ownership, including identifying at least one node in the crash dump, characterizing the at least one node in the crash dump as a node of inferred type and appending the at least one node to a list of nodes of inferred type, determining whether each node in the list of nodes of inferred type is a structure, and for each node in the list of nodes determined to be a structure determining whether each member in each node corresponds to a lock, and determining an owner of the lock.