sigfind -VERSION (return code: 0)
The Sleuth Kit ver 4.4.2
sigfind -HELP (return code: 1)
sigfind: invalid option -- '-'
sigfind [-b bsize] [-o offset] [-t template] [-lV] [hex_signature] file
-b bsize: Give block size (default 512)
-o offset: Give offset into block where signature should exist (default 0)
-l: Signature will be little endian in image
-V: Version
-t template: The name of a data structure template:
dospart, ext2, ext3, ext4, fat, hfs, hfs+, ntfs, ufs1, ufs2