Re: [sleuthkit-developers] re:stop-gap crap
Brought to you by:
carrier
From: Michael C. <mic...@ne...> - 2004-04-11 12:40:16
|
On Sun, 11 Apr 2004 02:53 pm, t f wrote: Hi dorkus, > I noticed that, on your projects page, you specify a "non-HTML" GUI...Is > Autopsy slow? It seems that a well-designed web page (PHP) presenting data > from a well-designed database would be the ideal solution. Apache, MySQL, > and PHP seem to run on just about everything these days...This approach > would make logging and metrics much cleaner, too. Sometimes its not a matter of having the gui too slow, some guis are more appropriate than others for certain tasks. For example pyflag uses mysql/python html gui which is fine for many things. However, we are currently thinking about implementing a gtk gui for it in order to experiment with some gui elements that are not possible to do in html (e.g. live progress bars etc). Also we currently have a command shell for pyflag called flash ( the flag shell)... this is used for scripting analysis - so we do a long nsrl comparison, and extract images/word document after loading the case in automatically in about 5 lines of flash script. This way all the time consuming tasks are done overnight, automatically, and we just examine the results. This is an example of a cli being better than html for this task. Michael. |