search

sleuthkit / autopsy

Autopsy® is a digital forensics platform and graphical interface to The Sleuth Kit® and other digital forensics tools. It can be used by law enforcement, military, and corporate examiners to investigate what happened on a computer. You can even use it to recover photos from your camera's memory card.
http://www.sleuthkit.org/autopsy/
2.41k stars 597 forks source link

Thumbnail View render time #100

Open kefir- opened 11 years ago

kefir- commented 11 years ago

Testing on a fairly typical Windows image in a E01 image, the Views -> File Types -> Images had 46 pages of images, with 200 images per page. It often took up to a minute to render the 200 thumbnails of the images on a single page, so browsing through can take a long time. (Ingest is running in the background, but only consuming around 12% CPU, and the network is not congested).

When I start browsing the images, it would be useful if Autopsy pre-renders pages in the background to save the operator time later.

Alternatively, it would be nice if Autopsy rendered all the thumbnails into a single page, and only rendered "on-demand" whatever is in the view at the time (plus a little extra for scrolling?). That would make it easier to browse through all the entries, and jump to a given offset. Currently, there is no way to jump to a given page of thumbnails, it seems I have to click 45 times to get to page 45 of thumbnails, or 25 times to get to page 25 even if page numbers loop. This change would solve that as well.

Finally, it would be useful if the GUI remembered which entry is selected when switching between Table View and Thumbnail View, so that it displays the same entry and offset when changing views.

adam-m commented 11 years ago

Can now jump to any offset.

kefir- commented 11 years ago

That helps! But scrolling sideways between bunches of 200, and then up and down to see those 200 images isn't ideal. I think it would be better to either:

  1. Scroll sideways from page to page, fitting the number of images to the available area, or
  2. Scroll up and down to see all images.

Loading of images still takes a while, and I've noticed that small images are scaled up to fit into the space for each image. Probably a minor optimization, but small images could probably remain small here.

adam-m commented 11 years ago

Finally, it would be useful if the GUI remembered which entry is selected when switching between Table View and >Thumbnail View, so that it displays the same entry and offset when changing views. I believe the selections are being preserved, could you let me know if not the case?