Difference between pages "Optimistic decompression" and "Template:Disk Encryption"

From ForensicsWiki
(Difference between pages)
Jump to: navigation, search
(Created page with "Optimistic decompression is a digital forensics technique in which each byte of an input buffer is examined for the possibility of compressed data. If data is found that ''mig...")
 
 
Line 1: Line 1:
Optimistic decompression is a digital forensics technique in which each byte of an input buffer is examined for the possibility of compressed data. If data is found that ''might'' be compressed, a decompression algorithm is invoked to perform a ''trial decompression.'' If the decompressor does not produce an error, the decompressed data is processed. The decompressor is thus called ''optimistically''---that is, with the hope that it might be successful.
+
[[Category:Disk Encryption]][[:Category:Disk Encryption|Disk Encryption]]
 
+
Optimistic decompression is used as a tool to validate JPEGs that are produced by [[file carving]]. The approach can also be used for fragment reassembly carving by attempting to combine different combinations of fragments, looking for a combination that produces neither decompression errors nor visual discontinuities. This is the approach used by the [[Adroit]] file carver.
+
 
+
==See Also==
+
* http://cloud.github.com/downloads/simsong/bulk_extractor/bulk_extractor.pdf
+

Revision as of 01:27, 8 August 2012

Disk Encryption