Streamlining Digital Forensics with User-Centered Design

Key Takeaways

GrayKey users struggled to locate critical device data, download files in bulk, and manage storage — slowing high-stakes forensic investigations

• OneSpring facilitated moderated usability testing and drove design improvements to information hierarchy, icons, bulk download, and device storage management

• Task completion rates rose, one-click file downloads reduced retrieval time, and user satisfaction scores improved significantly

Background

GrayShift conducted usability testing to evaluate the effectiveness of the future-state GrayKey online experience. The primary objective was to assess how users interacted with the system while extracting and downloading data from connected devices. The usability testing sessions, facilitated by OneSpring, consisted of one-hour moderated interviews. Participants were guided through a series of tasks using a prototype, providing direct feedback on the clarity and efficiency of the system’s interface.

Challenge

The usability testing revealed several critical issues affecting the user experience.

• Participants often struggled to locate key information, leading to inefficiencies in task completion.

• The hierarchy of displayed information did not align with user priorities, making navigation cumbersome.

• Users expressed difficulty understanding the icons on the Attempted Passcodes page, often second-guessing their meaning.

• Additionally, the system lacked a clear method for downloading all extracted files at once, requiring users to select files individually.

• Device information was not consistently structured, making it challenging for users to quickly identify critical details like Case ID and Evidence ID.

• Storage management was another issue, as users lacked an intuitive way to remove old devices and free up space for new extractions.

Solution

To address these challenges, several design improvements were implemented including:

• Information hierarchy was adjusted to prioritize critical data, ensuring that users could easily access the most relevant details.

• Quick action buttons were added to streamline the process of copying and pasting device information into external programs.

• Icons on the Attempted Passcodes page were enhanced with descriptive keys to eliminate uncertainty.

• A new feature allowed users to download all files associated with a device in one click, improving efficiency.

• Device information presentation was refined to highlight essential identifiers such as Case ID and Evidence ID.

• Additionally, an intuitive method for removing old devices from GrayKey was introduced, allowing users to manage storage space more effectively.

"The improvements to GrayKey’s interface have transformed our workflow. Navigation is more intuitive, and the ability to quickly download all necessary data has saved us valuable time during investigations."

– Lead Forensic Investigator

Results

The usability enhancements led to notable improvements in user experience and efficiency.

• Task completion rates increased as users found it easier to navigate the interface and locate necessary information.

• The addition of a one-click file download option significantly reduced the time required to retrieve extracted data.

• Enhanced icons and improved information hierarchy minimized confusion and increased user confidence in performing tasks. Storage management became more streamlined, reducing bottlenecks caused by insufficient space.

Overall, user satisfaction scores improved, indicating that the system revisions successfully addressed key usability concerns.