The good thing about (and the point behind) kdump is that it works on core files. A kernel hook wouldn't.