...
|
...
|
@@ -57,10 +57,23 @@ Print a CVD information and verify MD5 and a digital signature.
|
57
|
57
|
\fB\-b, \-\-build\fR
|
58
|
58
|
Build a CVD file. \-s, \-\-server is required.
|
59
|
59
|
.TP
|
60
|
|
-\fB\-b, \-\-no\-cdiff\fR
|
|
60
|
+\fB\-\-max\-bad\-sigs=NUMBER\fR
|
|
61
|
+Maximum number of mismatched signatures when building a CVD. Default: 3000
|
|
62
|
+.TP
|
|
63
|
+\fB\-\-flevel\fR
|
|
64
|
+Specify a custom flevel. Default: 77
|
|
65
|
+.TP
|
|
66
|
+\fB\-\-cvd\-version\fR
|
|
67
|
+Specify the version number to use for the build. Default is to use the value+1
|
|
68
|
+from the current CVD in --datadir. If no datafile is found the default
|
|
69
|
+behaviour is to prompt for a version number, this switch will prevent the
|
|
70
|
+prompt.
|
|
71
|
+NOTE: If a CVD is found in the --datadir its version+1 is used and this value is ignored.
|
|
72
|
+.TP
|
|
73
|
+\fB\-\-no\-cdiff\fR
|
61
|
74
|
Don't create a .cdiff file when building a new database file.
|
62
|
75
|
.TP
|
63
|
|
-\fB\-b, \-\-unsigned\fR
|
|
76
|
+\fB\-\-unsigned\fR
|
64
|
77
|
Create a database file without digital signatures (.cua).
|
65
|
78
|
.TP
|
66
|
79
|
\fB\-\-server\fR
|
...
|
...
|
@@ -93,11 +106,14 @@ List all signature names from the local database directory (default) or from FIL
|
93
|
93
|
\fB\-fREGEX, \-\-find\-sigs=REGEX\fR
|
94
|
94
|
Find and display signatures from the local database directory which match the given REGEX. The whole signature body (name, hex string, etc.) is checked.
|
95
|
95
|
.TP
|
96
|
|
-\fB\-fREGEX, \-\-decode\-sigs=REGEX\fR
|
|
96
|
+\fB\-\-decode\-sigs=REGEX\fR
|
97
|
97
|
Decode signatures read from the standard input (eg. piped from \-\-find\-sigs)
|
98
|
98
|
.TP
|
99
|
|
-\fB\-fREGEX, \-\-test\-sigs=DATABASE TARGET_FILE\fR
|
|
99
|
+\fB\-\-test\-sigs=DATABASE TARGET_FILE\fR
|
100
|
100
|
Test all signatures from DATABASE against TARGET_FILE. This option will only give valid results if the target file is the final one (after unpacking, normalization, etc.) for which the signatures were created.
|
|
101
|
+.TP
|
|
102
|
+\fB\-\-print\-certs=FILE\fR
|
|
103
|
+Print Authenticode details from a PE file.
|
101
|
104
|
.SH "EXAMPLES"
|
102
|
105
|
.LP
|
103
|
106
|
.TP
|