Coredump
Dumping the process memory can be useful for recovering data.
$ # get the process pid
$ pgrep -l app_name
$ # attach gdb and dump core, this will kill the app
$ gdb <pid>
gcore app.dump
quit
$ # find data in dump
$ strings app.dump | grep "what i want to find"