Use find to reduce the number of candidates in script.sh

1 files changed, 1 insertions, 1 deletions

diff --git a/script.sh b/script.sh
index 95c2a9a..ce01467 100755
--- a/script.sh
+++ b/script.sh
@@ -5,6 +5,6 @@ mkdir -p "$MOUNT_PATH"
 while read name
 do
         sudo mount -t ext4 -oloop,ro,noload "$name" "$MOUNT_PATH"
-        ./yara -r malwares.yara -f -s "$MOUNT_PATH"
+        find -P -O3 -iname '*.ph*' -type f -size -5M -print0 -exec ./yara -r malwares.yara -f -s {}\;
         sudo umount "$MOUNT_PATH" || exit 1
 done