Insights
Latest research
Bytes Before Meaning
Reading a file looks like one step. It is several, and each one is an interpretation, from bytes to text to lines to a table.
Read the articleWhere iMessage and SMS records live
iMessage, SMS, and RCS on an iPhone are reported in one SQLite file, sms.db.
ReadWhat a chat record shows
A chat an examiner reads usually has parties, a body or an attachment, and a time.
ReadWhat KnowledgeC records about use
knowledgeC.db is a usage log, not the messages themselves.
ReadTwo Names, One List
Lists, tuples and dictionaries looked like syntax. What took longer was that a name points at an object, so two names can share one list.
ReadHow a chat record is stored
A chat is stored as separate rows for the message, the conversation, and the address.
ReadHow Messages writes its database
Messages is reported to keep iMessage, SMS, and RCS in one SQLite database.
Read
Learn
Learn the tools
Tools tour
How each tool works, step by step, in its own words.
Take the tourVerify a download
Check a file's SHA-256 and its signature before you run it.
How to checkHow insights are written
Independence, sources and the language the research uses.
Read the method
Release notes
What's new
The current release of each tool. Dates are mm/dd/yyyy.
DEVI Validate
v1.0.3 · released 10/07/2026. Hashes are computed and compared as in 1.0.2. Records and packages show version 1.0.3. Installed 1.0.0, 1.0.1, and 1.0.2 copies are offered 1.0.3 through Check for updates.
What's newDEVI Decrypt
v1.0.3 · released 10/07/2026. Decryption and hashing work as in 1.0.2. Installed 1.0.2 copies are offered 1.0.3 through Check for updates.
What's newDEVI Registry
v1.0.4 · released 10/07/2026. Lookups work as in 1.0.3, and the app still bundles the 1.0.0 data. Installed 1.0.3 copies are offered 1.0.4 through Check for updates.
What's new
Get access
Put DEVI on your own computers
We review every request, usually within the same business day. Verified law enforcement, prosecution, defense and contractor examiners.