Didier Stevens

Tuesday 17 April 2012


Filed under: .NET,My Software — Didier Stevens @ 11:33

Interactive Sieve is a program I developed to help you analyze log files and other data in tabular form. It’s designed to help you when you don’t know exactly what you’re looking for. You sift through the data by hiding or coloring events (or data) that are not relevant.

I started writing this program in 2007 and use it often. But there is a problem I’ve not been able to fix: when you hide a lot of rows, it takes a long time, probably because of the redraw operation that takes place for each hidden row. Maybe someone will find a solution.
Update: big thanks to @woanware for fixing the redraw performance problem!

For more details on how to use the program, select Help / About.

InteractiveSieve_V_0_7_3_0.zip (https)
MD5: F36B245584DE143A15F484AA6220D67F
SHA256: AE0804EA739AEDC5FA32B7F6FD99AB99A35F7742B98953A653E0C24725E0FE6F


  1. Immediately useful.. big thanks.

    Comment by rob — Thursday 19 April 2012 @ 6:22

  2. Agreed, thanks. I did have trouble with empty fields. For example, on a file list with a field for extension, but where a file had no extension, InteractiveSieve moved the data for the next field into the extension cell, even though I denoted the empty field in a CSV with “,,” that is,two commas next to each other with no data in between. What should I do to prevent empty fields from causing columns to shift?


    Comment by Troy Larson — Tuesday 24 April 2012 @ 0:03

  3. @Troy Larson I was able to reproduce your problem. It’s a bug, thanks for notifying me. I’ll fix it in a next release.

    Comment by Didier Stevens — Wednesday 25 April 2012 @ 9:09

  4. […] Thus I wrote my own Python program. It accepts a file with a list of hashes, and produces a CSV file with the result. Here is an example displayed with InteractiveSieve: […]

    Pingback by Searching With VirusTotal « Didier Stevens — Monday 21 May 2012 @ 5:05

RSS feed for comments on this post. TrackBack URI

Leave a Reply (comments are moderated)

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out /  Change )

Twitter picture

You are commenting using your Twitter account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )

Connecting to %s

This site uses Akismet to reduce spam. Learn how your comment data is processed.

Blog at WordPress.com.