From 4b98e88a142c8f1740e564337b30ecadc230cb5a Mon Sep 17 00:00:00 2001 From: Jordan Wiens Date: Tue, 9 Jul 2024 01:09:00 -0400 Subject: re-order triage items and number image --- docs/guide/index.md | 14 +++++++------- 1 file changed, 7 insertions(+), 7 deletions(-) (limited to 'docs/guide') diff --git a/docs/guide/index.md b/docs/guide/index.md index e3715710..35bd9191 100644 --- a/docs/guide/index.md +++ b/docs/guide/index.md @@ -597,7 +597,13 @@ entropy map to navigate to that location in your default view. File Info: The file info section contains some summary information for the file, each result can be clicked to copy it into your clipboard. -### 3. Base Address Detection (BASE) +### 3. Headers + +This section appears only in BinaryViews and the exact information depends on the view itself. PE headers +are the most detailed and include such items as checksums, characterstics, and compiler strings. Addresses that +existing in the virtual memory space of the file can be clicked to navigate to that location. + +### 4. Base Address Detection (BASE) ![BASE](../img/base.png "BASE Address Detection"){ width="800" } @@ -626,12 +632,6 @@ address, otherwise the alignment would need to account for the header. |Points of Interest|Specifies types of points-of-interest to use for analysis (all, strings only, functions only)|All| |Max Pointers|Maximum amount of pointers to allow in each pointer cluster|0n128| -### 4. Headers - -This section appears only in BinaryViews and the exact information depends on the view itself. PE headers -are the most detailed and include such items as checksums, characterstics, and compiler strings. Addresses that -existing in the virtual memory space of the file can be clicked to navigate to that location. - ### 5. Libraries For file formats that include explicit linking information to a particular library (like PE), the -- cgit v1.3.1