[sleuthkit-developers] [ sleuthkit-Feature Requests-3152442 ] sigfind "I'm feeling lucky" option
Brought to you by:
carrier
From: SourceForge.net <no...@so...> - 2011-01-06 14:57:34
|
Feature Requests item #3152442, was opened at 2011-01-06 14:57 Message generated for change (Tracker Item Submitted) made by You can respond by visiting: https://sourceforge.net/tracker/?func=detail&atid=477892&aid=3152442&group_id=55685 Please note that this message will contain a full copy of the comment thread, including the initial issue submission, for this request, not just the latest update. Category: None Group: None Status: Open Priority: 5 Private: No Submitted By: https://www.google.com/accounts () Assigned to: Nobody/Anonymous (nobody) Summary: sigfind "I'm feeling lucky" option Initial Comment: sigfind is useful in locating partition tables in disk images, virtual machine files etc. In the vast majority of cases if there is a partition table it is normally the first match that sigfind finds, especially when using a template with the -t switch. However, sigfind will continue to search the file for more signatures. This can be a minor annoyance when using sigfind in a script/batch file. Would it be possible to have an option that will stop sigfind searching as soon as it makes a match and outputs the result to STDOUT? ---------------------------------------------------------------------- You can respond by visiting: https://sourceforge.net/tracker/?func=detail&atid=477892&aid=3152442&group_id=55685 |