Skip to main content

identify

Function identify 

Source
pub fn identify(code: &[u8; 446]) -> BootCodeId
Expand description

Identify the boot code occupying code[0..446].

All-zero / all-0xFF regions are classified locally; recognised bootloaders are matched against the forensicnomicon::boot_signatures knowledge base (the single source of truth for the fingerprint patterns).