Menu

#61 sigfind "I'm feeling lucky" option

open
nobody
None
5
2011-01-06
2011-01-06
Anonymous
No

sigfind is useful in locating partition tables in disk images, virtual machine files etc. In the vast majority of cases if there is a partition table it is normally the first match that sigfind finds, especially when using a template with the -t switch. However, sigfind will continue to search the file for more signatures. This can be a minor annoyance when using sigfind in a script/batch file. Would it be possible to have an option that will stop sigfind searching as soon as it makes a match and outputs the result to STDOUT?

Discussion


Log in to post a comment.