http://www.forensicblog.org/2007/05/02/evaluating-forensic-tools-beyond-the-gui-vs-text-flame-war/ Digital forensics from the view of a computer scientist Tue, 09 Mar 2010 21:44:18 -0800 http://wordpress.org/?v=2.9.2 hourly 1 http://www.forensicblog.org/2007/05/02/evaluating-forensic-tools-beyond-the-gui-vs-text-flame-war/comment-page-1/#comment-2038 Week’s Links | lonerunners.net Sun, 23 Nov 2008 15:26:55 +0000 http://www.forensicblog.org/2007/05/02/evaluating-forensic-tools-beyond-the-gui-vs-text-flame-war/#comment-2038 [...] Evaluating Forensic Tools: Beyond the GUI vs Text Flame War [...] [...] Evaluating Forensic Tools: Beyond the GUI vs Text Flame War [...]

]]> http://www.forensicblog.org/2007/05/02/evaluating-forensic-tools-beyond-the-gui-vs-text-flame-war/comment-page-1/#comment-148 www.andrewhay.ca » Suggested Blog Reading - Thursday May 3rd, 2007 Thu, 03 May 2007 10:01:23 +0000 http://www.forensicblog.org/2007/05/02/evaluating-forensic-tools-beyond-the-gui-vs-text-flame-war/#comment-148 [...] Evaluating Forensic Tools: Beyond the GUI vs Text Flame War - Very good points. Each interface mechanism has its pros and cons, and when evaluating a tool, the interface mechanism used can make an impact on the usability of the tool. For instance displaying certain types of information (e.g. all of the picture files in a specific directory) naturally lend themselves to a graphical environment. On the other hand, it’s important to me to be able to use the keyboard to control the tool (using a mouse can often slow you down). The idea that graphical tools “waste CPU cycles” is pretty moot, considering the speed of current processors, and that much forensic work focuses on data sifting and analysis, which is heavily tied to I/O throughput. See Andrew Hay and Daniel Cid's tutorial on Enterprise Log Analysis with Q1 Labs QRadar and OSSEC at the iTrust and PST Conferences on Privacy, Trust Management and Security in Moncton, New Brunswick, Canada. Email andrewsmhay [at] gmail.com for more information. [...] [...] Evaluating Forensic Tools: Beyond the GUI vs Text Flame War – Very good points. Each interface mechanism has its pros and cons, and when evaluating a tool, the interface mechanism used can make an impact on the usability of the tool. For instance displaying certain types of information (e.g. all of the picture files in a specific directory) naturally lend themselves to a graphical environment. On the other hand, it’s important to me to be able to use the keyboard to control the tool (using a mouse can often slow you down). The idea that graphical tools “waste CPU cycles” is pretty moot, considering the speed of current processors, and that much forensic work focuses on data sifting and analysis, which is heavily tied to I/O throughput. See Andrew Hay and Daniel Cid’s tutorial on Enterprise Log Analysis with Q1 Labs QRadar and OSSEC at the iTrust and PST Conferences on Privacy, Trust Management and Security in Moncton, New Brunswick, Canada. Email andrewsmhay [at] gmail.com for more information. [...]

]]>