A desktop application for reviewing and triaging large CSV files.
Trivium is a desktop tool designed to help you work with CSV files that are too large to handle comfortably in standard spreadsheet programs. It provides a simple, efficient interface for filtering data, flagging important rows, and adding notes.
Its core purpose is to make the process of manual data review and analysis faster and more manageable.
Pre-built versions for Windows are available for download from the project's Releases page. (Note: This is a placeholder link.)
This tool is primarily for anyone who needs to sift through large amounts of tabular data, such as:
- Security analysts reviewing logs or threat intelligence data.
- Data analysts performing preliminary data cleaning and exploration.
- Researchers categorizing and annotating datasets.
- Efficient CSV Handling: Imports large CSV files quickly by converting them into the efficient Parquet format.
- Virtualized Scrolling: The interface remains fast and responsive, even with millions of rows.
- Flag Rows: Mark any row as
Safe,Suspicious, orCriticalwith a single click. - Add Memos: Annotate rows with detailed notes and observations.
- IOC Rules: Define "Indicators of Compromise" (or any custom) rules to automatically flag rows and tag memos based on content, streamlining initial analysis.
- Filtering & Sorting: Instantly filter the view by flag status, search for text across all columns, and sort data by any column.
- Column Management: Toggle the visibility of columns to focus on the data that matters.
- Data Export: Export your work—including all flags and memos—back to a CSV file for use in other tools.
- Import Data: Launch the app and click "Import CSV" from the sidebar to create a new project.
- Review & Flag: Use the table view to inspect your data. Use the flag buttons (
✓,?,!) on each row to categorize them. - Add Memos: Click the memo icon to add detailed notes to any row.
- Use Filters: Use the search bar and flag filter at the top to narrow down the data.
- Configure IOCs: Open the "IOC Rules" manager to set up rules that automatically flag data for you.
- Export: When you're done, click the "Export Project" button to save your work as a new CSV file.
For developers who wish to build or modify the application.
- Node.js (v18 or later)
- Rust toolchain
- Tauri CLI setup
To run the application in development mode with hot-reloading:
npm install
npm run tauri devNote: npm run dev will run the Svelte frontend only, without the Rust backend.
To build the distributable application for your platform:
npm install
npm run tauri buildOn Windows, Trivium uses the Microsoft Edge WebView2 runtime to display the user interface.
If you are using the portable executable (.exe), you may need to install the WebView2 Runtime manually. You can download it from the official Microsoft website.
- Backend: Rust with the Tauri framework
- Data Processing: Polars for high-performance DataFrame operations (CSV/Parquet)
- Frontend: Svelte with TypeScript
- UI: Tailwind CSS
Projects are stored in the standard application data directory for your operating system.
trivium/projects/<uuid>/data.parquet- The imported data in Parquet format.trivium/projects/<uuid>/flags.json- Row flags and memos.trivium/projects/<uuid>/iocs.json- IOC rules for the project.trivium/projects.json- General metadata for all projects.
Trivium is provided under the MIT License. See LICENSE for details.