Interactive Sieve is a program I developed to help you analyze log files and other data in tabular form. It’s designed to help you when you don’t know exactly what you’re looking for. You sift through the data by hiding or coloring events (or data) that are not relevant.
I started writing this program in 2007 and use it often. But there is a problem I’ve not been able to fix: when you hide a lot of rows, it takes a long time, probably because of the redraw operation that takes place for each hidden row. Maybe someone will find a solution.Update: big thanks to @woanware for fixing the redraw performance problem!
For more details on how to use the program, select Help / About.
InteractiveSieve_V_0_7_3_0.zip (https)
MD5: F36B245584DE143A15F484AA6220D67F
SHA256: AE0804EA739AEDC5FA32B7F6FD99AB99A35F7742B98953A653E0C24725E0FE6F
Didier Stevens 
Immediately useful.. big thanks.
Comment by rob — Thursday 19 April 2012 @ 6:22
Agreed, thanks. I did have trouble with empty fields. For example, on a file list with a field for extension, but where a file had no extension, InteractiveSieve moved the data for the next field into the extension cell, even though I denoted the empty field in a CSV with “,,” that is,two commas next to each other with no data in between. What should I do to prevent empty fields from causing columns to shift?
Thanks.
Comment by Troy Larson — Tuesday 24 April 2012 @ 0:03
@Troy Larson I was able to reproduce your problem. It’s a bug, thanks for notifying me. I’ll fix it in a next release.
Comment by Didier Stevens — Wednesday 25 April 2012 @ 9:09
[…] Thus I wrote my own Python program. It accepts a file with a list of hashes, and produces a CSV file with the result. Here is an example displayed with InteractiveSieve: […]
Pingback by Searching With VirusTotal « Didier Stevens — Monday 21 May 2012 @ 5:05