What is Shannon Entropy in digital forensics?
Shannon entropy measures the average information density per byte. It is defined as H(X) = -Σ P(x) log₂(P(x)) and ranges from 0 to 8 bits per byte.
Calculate Shannon entropy distributions across binary files to detect packed executables, compressed sections, or hidden encrypted payloads with visual graphs.
Shannon entropy measures the average information density per byte. It is defined as H(X) = -Σ P(x) log₂(P(x)) and ranges from 0 to 8 bits per byte.